mmt[.]airdropsalert[.]app

This report details a malicious domain impersonating Google to facilitate cryptocurrency theft. The site, mmt.airdropsalert.app, presented a page titled "Google" and was designed as a cryptocurrency scam, posing a direct threat of financial loss to users who may have been tricked into providing credentials or connecting wallets under the false pretense of a legitimate Google service or airdrop.

Technical analysis confirms the malicious nature of the domain. VirusTotal flagged it with 16 detections out of 95 security vendors, with specific alerts from ADMINUSLabs, ChainPatrol, BitDefender, CRDF, and CyRadar. The domain is listed on one blocklist. It was hosted on IP address 216.58.212.132, located in the United States and belonging to AS15169 Google LLC, with the registrar being Cloudflare, Inc. The site did not have an SSL certificate.

As of the report, the domain is DOWN or OFFLINE, indicating it is no longer accessible. The risk level is assessed as high due to the confirmed brand impersonation of Google, the cryptocurrency scam classification, and the significant number of security vendor detections. Users who may have interacted with this site should monitor for unauthorized activity.