mon[.]app-airdropalert[.]sbs

This domain, mon.app-airdropalert.sbs, poses a risk of brand impersonation by mimicking Google. Visiting this site could lead users to believe they are interacting with a legitimate Google service, potentially resulting in the disclosure of sensitive information or falling victim to other fraudulent activities.

Analysis indicates that the domain was registered through Dynadot LLC and created on November 10, 2025. It currently resolves to the IP address 142.250.181.228, which is located in the United States and belongs to AS15169 Google LLC. The domain has been flagged by 12 out of 95 security vendors on VirusTotal, and it is listed on one security blocklist, specifically PhishDestroy. The site does not have an SSL certificate, further indicating its lack of security and authenticity.

If a user has visited this domain, they should immediately check their Google account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) for all Google services. Users should also monitor their financial accounts and credit reports for any signs of fraud. Reporting the incident to Google and the relevant authorities can help mitigate potential damage and assist in taking further action against the malicious infrastructure.