abstract[.]airdrpalerts[.]lol

The domain abstract.airdrpalerts.lol is a confirmed phishing site engaged in brand impersonation targeting Google. It presents itself as a legitimate Google page to deceive users into entering credentials or other sensitive information, posing an elevated risk of account compromise. No crypto drainer kit was identified. As of the latest verification, abstract.airdrpalerts.lol has been taken offline.

Technical indicators confirm the malicious nature of abstract.airdrpalerts.lol. The domain was flagged by 7 of 95 security vendors on VirusTotal, including ChainPatrol, CRDF, and Fortinet, though Google Safe Browsing did not detect it. It appears on one security blocklist (PhishDestroy) and was registered through Dynadot LLC on October 25, 2025. The domain resolves to the IP address 172.217.18.4, hosted on Google LLC's infrastructure (AS15169, US location), and lacks an SSL certificate. The observed page title was 'Google', and nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Users who interacted with abstract.airdrpalerts.lol should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google via their phishing reporting page and to the Anti-Phishing Working Group at reportphishing@apwg.org. Additionally, notify the registrar (Dynadot LLC) and Cloudflare, as the domain uses their nameservers.