fil[.]airdropalert[.]us

PhishDestroy identifies fil.airdropalert.us as a high-risk brand impersonation threat specifically targeting Gmail users. The domain was designed to mimic the Google login page, tricking victims into entering their credentials. With a risk level of high and a confirmed brand impersonation of Gmail, this site poses a significant danger to anyone who may encounter it through phishing emails or malicious links.

Technical analysis reveals alarming indicators: VirusTotal shows 11 out of 95 security vendors flagging the domain as malicious, and Google Safe Browsing lists it as phishing. The domain was created on October 19, 2025, through Dynadot LLC, and resolves to IP address 142.250.188.4. It appears on one security blocklist, has no SSL certificate, and its page title is simply "Google." These data points collectively confirm its fraudulent nature and high risk.

Users who have interacted with this domain should immediately change their Gmail password and enable two-factor authentication. Never enter credentials on sites reached via unsolicited links. Report the domain to Google Safe Browsing and your email provider. Stay vigilant against similar phishing attempts that exploit trusted brand names.