sym[.]airdrpsalert[.]club

The domain sym.airdrpsalert.club is a confirmed phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. No crypto drainer kit was detected. As of the latest verification, sym.airdrpsalert.club has been taken offline.

Technical indicators show limited but clear malicious activity. The domain was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through Dynadot LLC on October 26, 2025, sym.airdrpsalert.club resolved to the IP address 172.217.18.4, hosted on Google LLC's network (AS15169). No SSL certificate was issued, and the observed page title was 'Google'. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with sym.airdrpsalert.club should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to Google's support channels. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Victims may also file a complaint with the Internet Crime Complaint Center (IC3) if financial loss occurred.