spaceandtime[.]airdrpalerts[.]lat

The domain spaceandtime.airdrpalerts.lat was registered through Dynadot LLC on October 25, 2025 and currently resolves to the IP address 142.250.185.196, which belongs to AS15169 Google LLC in the United States. The domain is served by Cloudflare DNS using the nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, but it does not present an SSL/TLS certificate, indicating that any content would be delivered over plain HTTP. The HTTP response body contains a page title of "Google," matching the declared brand target of Google and confirming the classification as a brand impersonation attempt.

Reputation checks show a Gridinsoft trust score of 0 out of 100 and the domain appears on a single security blocklist. PhishDestroy has already taken the domain offline, and VirusTotal analysis reports nine of ninety‑five security vendors flagging the host as malicious. No additional technical artifacts, such as login forms or malware payloads, have been disclosed.

The limited detection footprint suggests the site may have been used briefly before takedown. Defenders should continue to monitor the IP address for any re‑hosting activity, enforce outbound HTTP inspection to detect unencrypted traffic to this host, and add the domain to internal blocklists. Given the alignment of the page title, brand target, and the observed infrastructure, the threat remains classified as elevated brand impersonation targeting Google users.