ip[.]airdrpsalert[.]club

Analysis of ip.airdrpsalert.club shows a newly registered domain created on 26 Oct 2025 that claims the brand Google in its page title. The domain resolves to 142.251.32.100, an address owned by AS15169 Google LLC in the United States, and it is served through Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented, indicating HTTP‑only access.

VirusTotal reports five of ninety‑five scanners flag the host, and Gridinsoft assigns a trust score of 0 / 100, reflecting a high likelihood of malicious intent. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. Registration was performed via Dynadot LLC. The site’s current status is offline, and no live page content has been captured; therefore visual or functional characteristics cannot be confirmed.

Observed indicators—brand impersonation of Google, recent registration, lack of SSL, low trust score, and multiple vendor detections—support classification as a brand‑impersonation scam. Defenders should add the domain to network and DNS blocklists, monitor for any resurrection of the host, and enforce strict verification of Google‑related URLs. Additional checks such as Safe Browsing or OTX can be consulted, but the existing evidence already warrants preventive controls.