op[.]airdrpsalerts[.]info

Analysis of op.airdrpsalerts.info indicates a brand impersonation threat targeting Google, with elevated risk due to observable technical indicators. The domain, registered through Cloudflare, Inc., resolved to IP 142.250.185.132, which is associated with AS15169 (Google LLC) in the US. Despite this IP association, the domain lacks an SSL certificate, a common red flag for phishing infrastructure. Nameservers were not found (NS_NOT_FOUND), further suggesting misconfigured or deliberately obscured hosting.

The domain was flagged by 13 of 95 security vendors on VirusTotal and appears on at least one security blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, reinforcing its classification as malicious. The page title 'Google' aligns with the reported brand target, confirming intent to impersonate Google services. No evidence of a phishing kit or specific scam subtype (e.g., credential harvesting, fake login) was provided, so the exact attack vector remains unconfirmed.

As of July 23, 2026, the domain is offline, though this does not preclude future reactivation. Defenders should treat this domain as compromised and block it at the network level. Additional monitoring of the IP (142.250.185.132) and registrar (Cloudflare) may reveal related malicious infrastructure. No Safe Browsing or OTX data was supplied, so further enrichment is recommended to assess historical activity or linked campaigns.