hbar[.]airdrpsalerts[.]info

This domain, hbar.airdrpsalerts.info, is flagged for brand impersonation, specifically targeting the Gmail brand. The site poses a significant risk as it attempts to deceive users into believing they are interacting with a legitimate Google service, which could lead to the theft of personal information, including login credentials and sensitive data.

Analysis indicates that hbar.airdrpsalerts.info has been detected by 3 out of 95 security vendors on VirusTotal, suggesting a targeted and sophisticated campaign. The domain was registered through Cloudflare, Inc., and although it currently does not have an SSL certificate, it resolved to the IP address 142.250.186.164. The site was taken offline, but the risk remains as the domain could be reactivated at any point.

If users have visited hbar.airdrpsalerts.info, they are advised to change their Gmail passwords immediately and enable two-factor authentication to enhance account security. It is also recommended to review recent account activity for any unauthorized access and report the incident to Google. Regularly updating security software and being cautious of unsolicited emails or messages directing to unfamiliar websites can help mitigate the risk of falling victim to similar campaigns.