sophon[.]airdrpsalerts[.]lat

This report details the domain sophon.airdrpsalerts.lat, which is a malicious impersonation site. The page title is "Google," and the site is categorized as an impersonation scam, specifically targeting the Google brand. The threat posed is brand impersonation, likely used to deceive users into believing they are interacting with a legitimate Google service, potentially for credential theft or other fraudulent activities.

Technical analysis reveals the domain was flagged by 8 out of 95 VirusTotal vendors. It is registered through Dynadot LLC and was created on 2025-10-29. The site resolves to IP address 216.58.206.36, located in Germany (DE), which is associated with AS15169 Google LLC. The domain uses nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No SSL certificate is present, and the site has a GridinSoft trust score of 0 out of 100.

The domain is currently offline and inaccessible. Given the high number of vendor detections, the impersonation of a major brand, and the complete lack of trustworthiness, this domain poses a high risk to users. It should be blocked at all network levels, and users should avoid any interaction with it.