# plume.airdrpalert.click — SUSPICIOUS

> Discover if plume.airdrpalert.click is safe or a phishing scam. Learn about its risk, status, and how to protect yourself from online threats.

## Summary
PhishDestroy classifies plume.airdrpalert.click as a medium-risk phishing domain. Although it is currently offline, the domain was designed to deceive users by masquerading as a legitimate Google page, potentially aiming to harvest sensitive information.

Analysis reveals that plume.airdrpalert.click was registered recently through Dynadot, LLC, and resolved to a Google-associated IP address (216.58.206.68), likely to lend it an appearance of legitimacy. The domain triggered alerts on multiple security blocklists and was flagged by several security vendors on VirusTotal, reinforcing its suspicious nature. Its recent creation date and association with a misleading title further underscore its phishing intent.

Users are advised to avoid interacting with suspicious links from unverified sources, especially those mimicking trusted brands like Google. Employing robust email filtering, updating security software, and verifying URLs before clicking can mitigate exposure to such threats. PhishDestroy recommends staying vigilant and reporting any deceptive sites to help maintain a safer online environment.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Google

## Domain Intelligence
- Registered: 2025-10-30 16:10:48
- Expires: 2026-10-30 16:10:48
- Registrar: Dynadot LLC
- Country: US
- IP: 216.58.206.68
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS15169 Google LLC
- Nameservers: brenna.ns.cloudflare.com hassan.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "CRDF", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a5469-0084-76c3-be97-06ccf93cc5eb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d16e105a-490d-45da-b4c6-687915c1822f
- PhishDestroy: https://phishdestroy.io/domain/plume.airdrpalert.click/
- LLM endpoint: https://phishdestroy.io/domain/plume.airdrpalert.click/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/plume.airdrpalert.click/
Last updated: 2026-03-19