dbr[.]airdrpsalerts[.]info

The domain dbr.airdrpsalerts.info was identified as a brand‑impersonation campaign targeting Google. Infrastructure analysis shows the domain was registered through Cloudflare, Inc. and resolves to the IP address 142.250.64.68, which belongs to AS15169 (Google LLC) and is geolocated in the United States. No SSL certificate was observed, and DNS queries returned no nameserver information (NS_NOT_FOUND). The site was intercepted by the PhishDestroy blocklist and appears on a single additional security blocklist, indicating that at least one external feed has flagged the domain.

VirusTotal scans recorded 12 detections out of 95 participating security vendors, reinforcing the malicious assessment. The page title returned by the server is "Google," matching the declared brand target. A Gridinsoft trust score of 0 out of 100 further underscores the low reputation of the hosting.

The domain is currently offline, but its prior activity suggests an elevated risk profile. Defenders should continue to block the domain and its associated IP at network perimeters, update URL filtering policies to include the observed blocklist entries, and monitor for any re‑registration attempts. Continuous reconnaissance of Cloudflare‑based registrars and the AS15169 address space is recommended to detect similar brand‑impersonation vectors in their early stages.