bridge[.]airdropalerts[.]pro

The domain bridge.airdropalerts.pro was registered on November 27, 2025 through Dynadot LLC and currently resolves to the IP address 142.250.185.196, which belongs to AS15169 owned by Google LLC in the United States. The site is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com. No TLS certificate is present, meaning the site is served over plain HTTP. The page title returned from the live host was "Google," and the domain is explicitly flagged as impersonating the Google brand.

Intelligence sources classify the activity as a crypto‑related scam, and the domain appears on one public blocklist managed by PhishDestroy. VirusTotal analysis shows that seven of ninety‑three scanned security vendors flagged the domain, reinforcing the malicious assessment. Gridinsoft assigns a trust score of zero out of one hundred, further confirming its low reputation.

The domain status is currently offline, which may indicate a temporary takedown or an evasion attempt, but the underlying infrastructure remains associated with Google’s IP range, a tactic often used to lend credibility to fraudulent campaigns. Defenders should immediately add bridge.airdropalerts.pro to outbound and inbound web filtering rules, ensure DNS sinkholing for the resolved IP, and monitor for any future re‑activation of the domain or similar sub‑domains that resolve to Google‑owned address blocks. Continuous review of threat‑intel feeds for additional blocklist listings and periodic re‑scanning on VirusTotal or comparable services is recommended to capture any changes in the detection profile.