fuel[.]airdropalert[.]us

As of July 23, 2026, the domain fuel.airdropalert.us has been confirmed to engage in a cryptocurrency scam, impersonating Google. This domain was registered through Dynadot LLC and was observed to have a page title of 'Google', which may have been used to mislead users into believing they were interacting with a legitimate Google service. The domain currently resolves to the IP address 142.250.190.228, which is located in the United States and is associated with Google LLC (AS15169). However, the domain has been taken offline, indicating that it has been either shut down by authorities or voluntarily removed by the registrant. Despite the domain being offline, it has been flagged for social engineering by Google Safe Browsing, which suggests that it was used to trick users into divulging sensitive information or performing unauthorized transactions. The domain also appears on one security blocklist, further confirming its malicious nature.

It is important to note that the domain does not have an SSL certificate, which is a common indicator of a legitimate site and a red flag for users who might have stumbled upon it. The domain was created on October 19, 2025, and has been associated with cryptocurrency scam activities. PhishDestroy, a known security solution, has blocked this domain to protect users from potential harm. Infrastructure analysis reveals that the domain was hosted using Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com), which is a common choice for both legitimate and malicious sites but does not inherently indicate malice. The Gridinsoft trust score for this domain is 0 out of 100, indicating a highly suspicious and untrustworthy site.

While the domain is currently offline, defenders should remain vigilant and ensure that any residual links or references to fuel.airdropalert.us are removed from their systems and networks.