airdropalerts[.]club

PhishDestroy has identified airdropalerts.club as a high-risk domain engaged in brand impersonation, specifically targeting Gmail users with a fake login page titled 'Google'. The domain is currently offline, but during its active period it posed a significant threat to anyone who encountered it. This type of phishing attack aims to steal credentials by tricking users into entering their email and password on a fraudulent site that mimics the legitimate Gmail interface.

The domain was registered on October 20, 2025, through Dynadot LLC and resolved to IP address 142.250.185.100. It appeared on four security blocklists and was flagged by 15 out of 95 security vendors on VirusTotal, indicating broad recognition as malicious. Google Safe Browsing also flagged it for phishing. Notably, the domain lacked an SSL certificate, which is a common red flag for phishing sites. Despite being taken offline, the domain's indicators remain valuable for threat hunting and blocking.

Given the domain's current offline status, the immediate risk is reduced, but users should remain vigilant. PhishDestroy recommends that anyone who may have visited airdropalerts.club change their Gmail password immediately and enable two-factor authentication. Organizations should block the domain and its associated IP at the firewall and monitor for any related phishing attempts. Always verify URLs before entering credentials and report suspicious domains to security teams.