bnc[.]airdrpsalerts[.]info

The domain bnc.airdrpsalerts.info is currently offline but was previously identified as a brand‑impersonation vector targeting Google. Infrastructure analysis shows the domain resolved to the IPv6 address 2a00:1450:4001:811::2004, which belongs to AS15169 (Google LLC) and is geolocated to Germany. Registration was performed through Cloudflare, Inc., and the domain lacks an SSL certificate, indicating that HTTPS was not provisioned. The site’s only observable content is the page title "Google," confirming the intended brand but providing no further detail on the page layout or login mechanisms.

Reputation services rate the domain extremely low, with Scamadviser assigning a trust score of 1 / 100 and Gridinsoft a score of 0 / 100. VirusTotal scans recorded 13 detections out of 95 security vendors, and the domain appears on a single external blocklist. PhishDestroy has already blocked the domain, and it is listed in one security blocklist.

Nameserver information is unavailable (NS_NOT_FOUND). Defenders should ensure the domain is added to internal URL filtering and DNS‑sinkhole lists, monitor for any resurgence of the same host name or similar sub‑domains, and consider tightening outbound traffic controls to the identified IPv6 address range. Continuous observation of Cloudflare‑registered domains associated with Google’s ASN is advised, as the use of legitimate cloud infrastructure can mask malicious activity.