sca[.]airdropsalert[.]bar
“Google”
Resumen de las pruebas
Analysis of sca.airdropsalert.bar shows it was registered on 20 October 2025 via Dynadot LLC. The domain uses Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com and resolves to IP 216.58.206.68, which belongs to AS15169 Google LLC and is geolocated in Germany. The page title returned is “Google”, matching the declared brand target and confirming the impersonation of Google. The site is classified as a crypto‑scam, and VirusTotal records indicate that 16 of 95 scanning engines flagged the domain as malicious. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist.
It has been actively blocked by PhishDestroy and is currently taken offline, as indicated by the “offline” status. No SSL certificate was observed, meaning the site operated without HTTPS. The combination of a brand‑matching page title, low trust score, multiple vendor detections, and the use of a legitimate Google IP for hosting suggests a deliberate attempt to lend credibility to a fraudulent cryptocurrency offering.
Uncertainty remains regarding the exact payload or phishing pages that were served before takedown, as no content snapshots are available. Defenders should continue to block the domain at perimeter and endpoint layers, monitor for any resurgence or reuse of the same name servers, and watch for related domains that resolve to the same IP or employ similar Cloudflare name servers. Threat intel feeds should be updated to reflect the domain’s association with a Google‑impersonating crypto scam, and any detection rules that rely on the IP address 216.58.206.68 should be reviewed to avoid false positives on legitimate Google services.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 13/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Registration: airdropsalert.bar
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain airdropsalert.bar behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Inteligencia forense
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.