polkadot[.]airdropalert[.]us

The domain polkadot.airdropalert.us was registered on October 19, 2025 through Dynadot LLC and is currently taken offline. DNS resolution points to the IPv4 address 192.178.155.147, which belongs to the AS15169 Google LLC network and is geolocated in the United States. The domain is served by Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of a third‑party DNS provider to obscure the underlying infrastructure. No TLS certificate is presented; the site operates without HTTPS, which is atypical for legitimate Google‑related services and reduces transport‑layer trust.

The page title returned from the HTTP response is simply "Google," matching the declared brand target and supporting the classification as a Google brand impersonation campaign. Gridinsoft’s trust engine assigns a score of 0 out of 100, reflecting extreme suspicion. The site has been identified as a crypto‑scam, and it appears on one public security blocklist; PhishDestroy has explicitly blocked the domain. VirusTotal analysis shows that 11 of 93 scanning vendors flagged the domain, providing independent confirmation of malicious intent.

However, detailed content analysis is unavailable because the site is offline, leaving the exact phishing landing page, credential‑capture mechanisms, and malicious payloads unverified. Given the combination of brand impersonation, the use of a reputable IP range, lack of encryption, low trust score, and multi‑vendor detection, defenders should treat the domain as high‑confidence malicious. Recommended actions include adding the domain and its resolving IP address to perimeter blocklists, monitoring for any re‑registration or re‑activation, and ensuring that endpoint security solutions update signatures to reflect the current VirusTotal detections.