recall[.]airdropalerts[.]pro

This domain, recall.airdropalerts.pro, was registered on November 27, 2025, and is flagged as a crypto scam impersonating Google. Infrastructure analysis reveals the domain was hosted on Cloudflare nameservers (alexa.ns.cloudflare.com, randall.ns.cloudflare.com) and resolved to the IP 142.250.185.228, which is associated with Google LLC (AS15169) in the United States. No SSL certificate was detected, increasing the risk of unencrypted data transmission. The page title was explicitly set to 'Google,' aligning with the reported brand impersonation.

Detection data indicates the domain was flagged by 11 of 93 security vendors on VirusTotal and appears on at least one security blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. As of July 25, 2026, the domain is offline, but defenders should treat it as a confirmed threat due to its prior activity and detection history.

The registrar, Dynadot LLC, should be monitored for additional domains registered under similar patterns. While the exact content of the site was not analysed, the combination of brand impersonation, crypto scam classification, and detection by multiple vendors provides sufficient evidence for blocking or sinkholing this domain. Defenders are advised to review logs for connections to 142.250.185.228 during the active period and correlate with other domains using the same nameservers or registrar.