akt[.]airdrpsalert[.]lol

The domain akt.airdrpsalert.lol is a phishing site engaged in brand impersonation targeting Google. It presents itself as a legitimate Google service to deceive users into disclosing login credentials or other sensitive information. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, but prior visitors may still face consequences from exposed data.

Technical analysis shows akt.airdrpsalert.lol was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, G-Data, and SOCRadar. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Dynadot LLC on October 22, 2025, and resolves to the IP address 172.253.62.99, hosted on Google LLC's infrastructure in the US. No SSL certificate was observed, and the page title displayed 'Google'. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Users who interacted with akt.airdrpsalert.lol should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google's Safe Browsing team via their reporting tool and to the registrar, Dynadot LLC, to aid in takedown efforts. If financial or personal data was exposed, consider contacting relevant institutions to secure accounts.