scr[.]airdropsalert[.]app

The domain scr.airdropsalert.app has been identified as a brand impersonation threat, specifically targeting Google. This domain is currently offline, but its purpose was to mimic Google's legitimate login interface to deceive users into surrendering sensitive information, likely as part of a crypto drainer scheme. The domain was registered through Cloudflare, Inc., a common registrar for malicious sites due to its privacy protections. It resolves to IP address 172.253.62.147, which may be shared with other suspicious domains.

PhishDestroy's analysis reveals that this domain is flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant consensus among security tools about its malicious nature. Additionally, it appears on one security blocklist, further confirming its threat status. The domain lacks an SSL certificate, meaning any data transmitted would be unencrypted and vulnerable to interception. The page title was set simply to "Google," a straightforward attempt to trick visitors into believing they were on an official Google page. The unique seed for this analysis is 559260, and the domain's risk level was assessed as elevated before being taken offline.

Although scr.airdropsalert.app is currently offline, users should remain vigilant. This domain exemplifies a common tactic where threat actors impersonate trusted brands like Google to harvest credentials or deploy crypto drainers. PhishDestroy strongly advises users to never enter personal information on sites that mimic well-known brands without verifying their authenticity. Always check the URL carefully, look for SSL certificates, and use trusted security tools to scan unfamiliar domains. If you encounter similar domains, report them immediately to help protect the online community.