app[.]airdrop-hub[.]com

Analysis indicates that app.airdrop-hub.com is an active brand‑impersonation site targeting Google users. The domain was registered on September 5 2025 through Squarespace Domains LLC and currently resolves to 199.36.158.100, an address owned by AS54113 Fastly, Inc. in the United States. HTTP requests return status 200 and the site presents a valid SSL certificate issued by Google Trust Services (WR3), while employing Firebase, HSTS and HTTP/3. The page title “Airdrop Hub” and the identified phishing kit labelled “Airdrop Scam” align with a tech‑support scam narrative that pretends to assist users with Google‑related issues. VirusTotal records show 4 of 95 scanning engines flagging the domain, and it appears on a single security blocklist; PhishDestroy has already listed it as blocked, and Gridinsoft assigns a trust score of 0 / 100. Nameservers are ns‑cloud‑c1.googledomains.com, ns‑cloud‑c2.googledomains.com, and ns‑cloud‑c3.googledomains.com. While the exact page content has not been examined, the combination of brand impersonation, a known scam kit, and low trust metrics confirms a high‑risk profile. Defenders should immediately block the domain at perimeter and endpoint controls, add it to internal URL filtering lists, and monitor for outbound connections to the Fastly IP range. Continuous threat‑intel feeds should be consulted for any updates, and any detections of the Airdrop Scam kit should be correlated with this indicator.