fuel[.]airdropsalert[.]us

The domain fuel.airdropsalert.us was registered on October 18, 2025 through Dynadot LLC and is currently taken offline. It resolves to the IP address 142.250.188.4, which belongs to AS15169 Google LLC and is located in the United States. The authoritative name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com indicate use of Cloudflare DNS services. No TLS certificate was presented during the scan, confirming the absence of HTTPS protection.

Google Safe Browsing flags the site for social engineering, and the page title returned by the server is "Google", matching the declared brand target. VirusTotal analysis recorded 12 of 93 security vendors marking the domain as malicious, and the site appears on one external blocklist. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The site is identified as a crypto‑related scam that impersonates Google, and PhishDestroy has already blocked it.

While the exact content of the landing page has not been captured, the combination of brand impersonation, low trust score, multiple vendor detections, and a Google Safe Browsing flag provides strong evidence of abuse. Defenders should add fuel.airdropsalert.us to network blocklists, monitor DNS queries for the associated Cloudflare name servers, and enforce TLS validation to prevent connections to non‑encrypted endpoints. Continuous re‑evaluation is advised in case the domain is re‑hosted or repurposed, but current indicators warrant immediate remediation and inclusion in threat intelligence feeds.