airdrop[.]fragmetics[.]xyz

The domain airdrop.fragmetics.xyz is a confirmed phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with an official Google airdrop or promotion, posing an elevated risk of credential theft or fraudulent activity. No crypto drainer kit was identified. The site is currently taken offline, but its prior activity remains a security concern.

Technical analysis shows airdrop.fragmetics.xyz was flagged by 2 of 95 VirusTotal security vendors, including Forcepoint ThreatSeeker and Gridinsoft, which assigned a trust score of 0/100. The domain appears on 2 security blocklists, PhishDestroy and ScamSniffer, though it was not flagged by Google Safe Browsing. It was created on February 21, 2026, and resolved to the IP address 142.250.185.228, hosted on Google LLC's infrastructure (AS15169). The SSL certificate was issued by WE2, and the observed page title was 'Google'. Registrar information is not available.

Users who interacted with airdrop.fragmetics.xyz should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to Google's security team. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial or crypto assets were involved, revoke any token approvals and consider moving funds to a new wallet.