barterdefi[.]airdropsalert[.]biz

barterdefi.airdropsalert.biz was registered on October 18, 2025 through Dynadot LLC and is served by the Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The domain resolves to IP address 142.251.40.228, which is owned by Google LLC (AS15169) and located in the United States. No TLS certificate is present, indicating the site does not offer encrypted connections. The page title returned by the HTTP response is “Google”, matching the declared brand target of Google, and the campaign is classified as a crypto‑scam. Google Safe Browsing lists the domain under two social‑engineering entries, and VirusTotal reports that 14 of 95 security vendors have flagged the host as malicious.

Gridinsoft assigns a trust score of 0 / 100, and the domain appears on one external blocklist. PhishDestroy has taken the site offline, and its current status is recorded as offline. The observable infrastructure suggests a deliberate attempt to leverage the reputation of Google to lure victims into a cryptocurrency‑related fraud. The use of a Google‑owned IP address may be intended to increase perceived legitimacy, while the absence of TLS and the low trust score reinforce the malicious intent.

Because the site is no longer reachable, content‑level analysis is not possible; however, the combination of brand impersonation, the crypto‑scam label, and multiple vendor detections confirms a high‑risk profile. Defenders should add barterdefi.airdropsalert.biz to URL and DNS blocklists, enforce TLS inspection policies to reject unencrypted connections to this host, and monitor for any future re‑registration of similar domains. Continued surveillance of the associated IP range and the Cloudflare name servers is advised, as threats may shift to adjacent hosts. Network traffic to 142.251.40.228 originating from untrusted endpoints should be flagged for investigation.