recall[.]airdropsalert[.]us

This domain recall.airdropsalert.us was registered on 18 October 2025 through Dynadot LLC and currently resolves to the IP address 142.251.179.106, which belongs to AS15169 Google LLC and is geolocated in the United States. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare DNS services. The site is presently taken offline, and the HTTP service returns no SSL certificate, which is consistent with the observed lack of HTTPS support. The page title returned by the web server is “Google”, and the domain is explicitly catalogued as impersonating the Google brand.

Analysis of public threat‑intelligence feeds shows that the domain is classified as a crypto‑related scam, and it has been added to at least one security blocklist, with PhishDestroy confirming the block. VirusTotal records indicate that 12 out of 93 scanning engines have flagged the domain as malicious, reinforcing the suspicion of abuse. The Gridinsoft trust score of zero further reflects a poor reputation.

Although the site is offline, the infrastructure – including the Google‑owned IP address and Cloudflare name servers – suggests an attempt to leverage legitimate hosting to increase credibility. Defenders should continue to block recall.airdropsalert.us at perimeter and DNS layers, monitor for any re‑appearance on the same IP or name‑server pair, and consider submitting the indicator to additional threat‑sharing platforms. Ongoing observation of the associated IP range and Cloudflare zones is recommended to detect potential reuse by other malicious actors.