morpho[.]airdropsalert[.]life

Analysis of morpho.airdropsalert.life indicates a confirmed phishing domain targeting Google users through a fraudulent airdrop scheme. The domain was registered on October 17, 2025, via Dynadot LLC and has since been taken offline. Infrastructure analysis reveals resolution to IP 142.250.186.164, which belongs to AS15169 (Google LLC), though this does not confirm legitimate affiliation.

The page title explicitly displays 'Google,' aligning with the reported brand impersonation. No SSL certificate was detected, increasing susceptibility to interception. Security vendor detections on VirusTotal reached 17 out of 95, while PhishDestroy has blocked the domain, and it appears on one additional security blocklist.

The scam type is classified as a fake airdrop, a common tactic to deceive users into disclosing credentials or transferring assets. Defenders should treat this domain as malicious, blacklist it, and monitor for related infrastructure reuse. The exact content of the phishing page remains unanalyzed, but the combination of brand impersonation, absence of encryption, and vendor detections confirms its fraudulent nature.