haedal[.]airdropalert[.]us
“Google”
haedal.airdropalert.us — Conteúdo indisponível. Representação da marca: Google; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 13/93 (ChainPatrol, alphaMountain.ai, BitDefender, Certego, CRDF); Google Safe Browsing flagged; PhishDestroy score 89/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
haedal.airdropalert.us was registered on 19 October 2025 through Dynadot LLC. The domain resolves to the IPv4 address 192.178.218.99, which is announced by AS15169 belonging to Google LLC and geolocated to the United States. The authoritative name servers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare DNS. No TLS certificate is presented for the site, and the HTTP service is currently offline, preventing live page retrieval. The only visible artifact is the HTML title “Google”, which aligns with the reported brand target of Google and the classification as a crypto‑scam impersonation. The domain appears on a single security blocklist, specifically PhishDestroy, and is flagged by Google Safe Browsing for social engineering.
Independent scanning on VirusTotal returned detections from 13 of 93 security vendors, reinforcing the malicious assessment. The Gridinsoft trust score is 0 out of 100, the lowest possible rating, and the site is listed as a crypto scam in the intelligence feed. The overall risk rating assigned to the indicator is high. Defenders should immediately deny any network connections to haedal.airdropalert.us and, where feasible, add the associated IP address 192.178.218.99 to blocklists.
Monitoring for any future re‑hosting of the domain or reuse of the same IP range is advisable, given the use of Cloudflare infrastructure that can be repurposed. Because the site lacks an SSL certificate, any attempted HTTPS connections will fail, yet HTTP requests may still reach the host if it becomes active. Continuous ingestion of blocklist updates from PhishDestroy and Google Safe Browsing will ensure timely detection of re‑appearance. Organizations employing DNS filtering should include the domain in their deny lists, and incident response teams should treat any email or web traffic referencing the domain as malicious, especially in the context of unsolicited cryptocurrency offers that claim to be from Google.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Inteligência forense
Análise do VirusTotal
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo