graph[.]airdropalerts[.]life

This domain, graph.airdropalerts.life, was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the IP address 142.250.185.68, which belongs to AS15169, Google LLC, located in the United States. The hosting attribution indicates that the infrastructure leverages a legitimate Google address, a technique often used to increase credibility. The site presents a page title of “Google”, directly targeting the Google brand, and is classified as a credential‑phishing operation.

VirusTotal analysis shows that 14 of 93 scanning engines flagged the domain, confirming malicious intent. The domain appears on a single external blocklist, PhishDestroy, which has already taken it down. Additional reputation data includes a Gridinsoft trust score of 0 out of 100 and an SSL certificate identified only as “WE2”, suggesting a self‑signed or otherwise low‑trust certificate. The combination of brand impersonation, low trust score, and multiple vendor detections indicates a heightened risk, consistent with the elevated risk level assigned.

Because the site is offline, real‑time verification of its content is not possible, and the exact phishing page layout remains unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and add the associated IP address to threat‑intel feeds. Ongoing observation of VirusTotal and blocklist updates is recommended to capture any future activity that may arise if the infrastructure is resurrected.