bard[.]airdropalerts[.]pro

Analysis of bard.airdropalerts.pro shows that the domain was registered on 27 November 2025 through Dynadot LLC and is currently taken offline. The domain resolves to the IP address 142.250.186.164, which belongs to AS15169 Google LLC and is geolocated in the United States. The authoritative nameservers are alexa.ns.cloudflare.com and randall.ns.cloudflare.com, indicating Cloudflare DNS usage. The only visible page title is "Google", matching the declared brand target of Google, and the domain is classified as a crypto scam that impersonates the Google brand.

No TLS certificate was presented, leaving the HTTP connection unencrypted. Threat intelligence feeds have flagged the domain: PhishDestroy has blocked it, it appears on one public security blocklist, and VirusTotal reports seven detections out of ninety‑three scanners. The Gridinsoft trust score of zero further confirms a lack of legitimacy. Because the site is offline, live content cannot be examined, and the exact payload or phishing kit remains unknown.

Defenders should continue to enforce network‑level blocks for the domain and its resolving IP, update URL filtering rules to include the observed hostnames, and monitor related Cloudflare nameserver patterns for future campaigns. Additional verification of any email or messenger vectors that reference this domain is advisable, as attackers may reuse the same branding and infrastructure. Continuous review of threat‑intel feeds is recommended to capture any re‑activation of the domain or emergence of sibling domains using the same registration profile.