graph[.]airdropsalert[.]us

The domain graph.airdropsalert.us was registered through Dynadot LLC on October 18, 2025 and currently resolves to the IP address 142.250.188.4, which belongs to AS15169 Google LLC located in the United States. The site presents a page title of "Google" and is classified as a crypto scam that impersonates the Google brand. VirusTotal records indicate that twelve of ninety‑three security vendors flagged the domain, confirming a moderate level of detection across the scanning ecosystem. Google Safe Browsing has flagged the domain for social engineering, and the domain appears on one external blocklist.

PhishDestroy has taken the site offline, and the current status is reported as offline. No SSL certificate was observed for the domain, and the trust score reported by Gridinsoft is zero out of one hundred, suggesting an extremely low reputation. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

While the available data confirms the presence of brand impersonation and a crypto‑related lure, the specific content of the page beyond the title has not been captured, leaving the exact user‑facing mechanisms unverified. Defenders should add the domain to network‑level blocklists, monitor DNS queries for the associated IP, and enforce TLS inspection to detect any future attempts to serve content over HTTPS. Continuous observation of the registrar and hosting infrastructure is advised, as changes to the DNS or IP allocation could indicate re‑activation of the campaign.