omni[.]airdrpsalerts[.]info

This domain, omni.airdrpsalerts.info, was identified as a brand impersonation threat targeting Google. The investigation was conducted on July 23, 2026, and the domain is currently offline. The page title was set to 'Google', confirming its impersonation of the Google brand. The domain was registered through Cloudflare, Inc., a common registrar for such operations. It resolves to IP address 142.250.185.100, which is associated with AS15169 Google LLC and located in the United States.

No SSL certificate was detected, indicating the page likely did not offer secure connections. The domain was flagged by 12 out of 95 security vendors on VirusTotal, demonstrating a moderate detection rate. Additionally, it appeared on one security blocklist, specifically PhishDestroy. The Gridinsoft trust score was 0 out of 100, reflecting a high level of suspicion. The nameservers were reported as NS_NOT_FOUND, suggesting the domain's DNS configuration was incomplete or removed.

Analysis indicates the domain was used to host a fake Google-branded page, likely for credential theft or other fraudulent activities. Defenders should ensure their security tools include blocklists covering this domain and monitor for similar patterns. While direct evidence of a phishing kit was not observed, the impersonation and lack of SSL reinforce the phishing classification. The takedown status suggests that proactive measures were effective in mitigating immediate risk, but vigilance remains necessary for related domains.