airdropalert[.]life

The domain airdropalert.life is a confirmed phishing site engaged in brand impersonation targeting Google. It presents itself as a legitimate Google service to deceive users into participating in an airdrop scam, a type of fraud designed to steal personal information or cryptocurrency. No drainer kit was detected, but the site has been taken offline, reducing immediate risk to users.

Technical indicators confirm the malicious nature of airdropalert.life. The domain is flagged by 8 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and Certego. It appears on one security blocklist (PhishDestroy) and is registered through Cloudflare, Inc. The site resolves to the IP address 142.250.185.228, hosted by Google LLC in the US, and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title is 'Google,' reinforcing its impersonation of the brand. AlienVault OTX lists the domain in one threat intelligence pulse, and Scamadviser assigns it a trust score of 1 out of 100. Technologies detected include Cloudflare and HTTP/3.

Users who interacted with airdropalert.life should take immediate action to mitigate risk. If personal credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims may also file complaints with the FBI’s Internet Crime Complaint Center (IC3) or equivalent agencies in their region.