flx[.]airdrpalerts[.]lat

On July 23, 2026, the domain flx.airdrpalerts.lat was identified as a brand impersonation scam targeting Google. This domain has a Gridinsoft trust score of 0 out of 100, indicating a high level of suspicion. The domain appears on one security blocklist, specifically PhishDestroy, which suggests it has been flagged for malicious activity. The domain was registered through Dynadot LLC and uses Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com).

It was created on October 25, 2025, and at the time of the report, it is offline, resolving to the IP address 142.250.80.68, which is associated with Google LLC in the United States. The domain does not have an SSL certificate, which is a common characteristic of phishing sites aiming to reduce detection. The page title found is 'Google', further supporting the impersonation of the Google brand.

While the domain is currently offline, it has been flagged by 6 out of 95 security vendors, indicating a potential risk. Defenders should remain vigilant and ensure that any similar domains are monitored for signs of reactivation. Additionally, users should be cautious and verify the authenticity of any communications or links that appear to come from Google, especially if they are directed to unusual or unsecured web pages.