vvv[.]airdropsalert[.]app

The domain vvv.airdropsalert.app presents a deceptive site designed to impersonate the Gmail brand for cryptocurrency-related scams. The page title displays "Google," suggesting an attempt to mislead users into believing they are accessing a legitimate Google service. The threat involves phishing for credentials or tricking users into fraudulent cryptocurrency transactions, leveraging the trusted Gmail interface to harvest sensitive information.

Technical analysis reveals that the site was flagged by 18 out of 95 VirusTotal vendors, indicating widespread detection as malicious. It was specifically flagged by security entities including ADMINUSLabs, ChainPatrol, BitDefender, Chong Lua Dao, and CRDF. The domain is registered through Cloudflare, Inc. and resolves to IP address 142.250.31.103, which is located in the United States and belongs to AS15169 Google LLC. No SSL certificate is present, and the nameservers are listed as NS_NOT_FOUND. The domain's risk score is 10, reflecting high threat potential.

The site is currently down or offline, with a status of DOWN/OFFLINE. It appears on one blocklist. Given the high detection rate, impersonation of a major brand, and association with cryptocurrency scams, the risk level is severe. Users should avoid any interaction with this domain and treat it as a confirmed threat.