airdrpsalert[.]life

Analysis of the domain airdrpsalert.life indicates a high-risk brand impersonation operation targeting Facebook users, as of July 23, 2026. The domain, now offline, was flagged by four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—and resolved to IP address 142.251.35.164, hosted on Google LLC’s infrastructure (AS15169) in the United States. Despite its association with Google’s network, the domain exhibited no SSL certificate, a common red flag for fraudulent sites.

Registration details reveal Cloudflare, Inc. as the registrar, with nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, a configuration often leveraged to obscure hosting origins. VirusTotal reports that 12 of 95 security vendors classified this domain as malicious, though the absence of an SSL certificate and the presence of a generic 'Google' page title—despite its Facebook impersonation—suggest misdirection or incomplete deployment. Gridinsoft assigned a trust score of 0/100, reinforcing its high-risk classification.

While the domain’s exact content remains unanalyzed, its scam type is confirmed as brand impersonation, specifically mimicking Facebook. Defenders should treat this domain as compromised and prioritize blocking it at DNS and network levels, particularly in environments where Facebook-related traffic is prevalent. The domain’s current offline status does not preclude future reactivation, warranting continued monitoring of related infrastructure.