zeebu[.]airdrpsalerts[.]info

Analysis of the domain zeebu.airdrpsalerts.info indicates it was actively impersonating Google, as confirmed by its page title ('Google') and explicit classification as a brand impersonation scam. The domain resolved to IP address 142.250.186.164, which is assigned to AS15169 (Google LLC) in the United States, though this IP association does not confirm legitimate hosting. No SSL certificate was detected, increasing susceptibility to interception and reducing user trust signals. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., but nameserver records were not found (NS_NOT_FOUND), suggesting possible misconfiguration or evasion tactics. Detection data from July 23, 2026 shows the domain was flagged by 14 of 95 security vendors on VirusTotal, indicating moderate consensus on its malicious nature.

It appeared on one security blocklist and was blocked by PhishDestroy. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as high-risk. The domain is currently offline, though defenders should retain indicators for retrospective hunting. The exact content and functionality of the phishing page remain unanalyzed, as no forensic capture is available.

The page title ('Google') and brand target (Google) provide the sole evidence of impersonation intent. No phishing kit, redirect chain, or credential-harvesting behavior has been confirmed. Defenders are advised to block the domain at DNS and proxy layers, monitor for re-registration under new TLDs or subdomains, and correlate the IP (142.250.186.164) with other suspicious domains in historical logs. Given the absence of SSL and the domain's offline status, further network-based detection may be limited to retrospective analysis.