stellar[.]airdropsalert[.]bar

This domain, stellar.airdropsalert.bar, poses a specific threat of brand impersonation, targeting the Gmail brand. The domain is designed to deceive users into believing they are interacting with a legitimate Google service, which can lead to unauthorized access to personal information and potential credential theft.

Analysis indicates that 18 out of 95 security vendors on VirusTotal flag stellar.airdropsalert.bar as malicious. The domain was created on October 20, 2025, and is registered through Dynadot LLC. It appears on 1 security blocklist and currently resolves to the IP address 142.250.185.164, which is located in the United States and associated with AS15169 Google LLC. Despite the IP association, the lack of an SSL certificate and the presence on security blocklists suggest that the domain is not a legitimate Google service.

If users have visited stellar.airdropsalert.bar, they should immediately change their Gmail passwords and enable two-factor authentication (2FA) for their accounts. Additionally, users should monitor their accounts for any unusual activity and report any suspicious incidents to their email provider. It is recommended to avoid clicking on links or providing personal information on any unfamiliar or untrusted websites.