aethir[.]airdropalerts[.]life

Analysis of the domain aethir.airdropalerts.life indicates it was created on February 21, 2026, and is classified as a credential phishing site impersonating Google. The domain resolved to the IP address 64.233.180.147, which is registered to AS15169 (Google LLC) in the United States. Despite the hosting infrastructure belonging to Google, the domain itself exhibits multiple indicators of malicious activity. The page title was recorded as 'Google,' reinforcing the impersonation attempt.

As of the report date, the domain appears on one security blocklist and is flagged by 4 out of 93 security vendors on VirusTotal, confirming detection by multiple threat intelligence sources. Gridinsoft assigned a trust score of 0/100, further supporting the malicious classification. The domain has been taken offline, though its prior SSL certificate was rated WR2, suggesting weak or suspicious encryption standards.

Defenders should treat this domain as a confirmed phishing threat and ensure it is blocked across security controls. The combination of brand impersonation, low trust scores, and detection by security vendors provides sufficient evidence to classify aethir.airdropalerts.life as a credential phishing operation targeting Google users. No additional scam categorization or page content analysis is available at this time.