stellar[.]airdrpsalerts[.]info

The domain stellar.airdrpsalerts.info is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google page to deceive users into divulging sensitive information, such as login credentials. No crypto drainer kit was identified in this campaign. As of the latest verification, stellar.airdrpsalerts.info has been taken offline, though users who interacted with it should remain cautious.

Technical analysis of stellar.airdrpsalerts.info reveals limited detection by security vendors, with only 2 of 95 VirusTotal vendors flagging it, including ChainPatrol and SOCRadar. The domain is registered through Cloudflare, Inc., though its creation date is not available. It resolves to the IPv6 address 2a00:1450:4001:80f::2004, hosted on Google LLC's infrastructure in Germany (AS15169). The domain appears on one security blocklist, PhishDestroy, and lacks an SSL certificate. The observed page title was 'Google', reinforcing its impersonation of the legitimate brand.

Users who visited stellar.airdrpsalerts.info should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on their Google accounts. Monitor accounts for unauthorized activity and report any suspected fraud to Google's support channels. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or personal data was exposed, consider contacting local cybercrime authorities for further assistance.