s[.]airdrpsalerts[.]sbs

As of July 23, 2026, the domain s.airdrpsalerts.sbs is flagged for brand impersonation and is currently offline. The domain impersonates Google, as indicated by the page title found during analysis. Despite the current offline status, the domain has been listed on one security blocklist and is blocked by PhishDestroy, indicating a prior history of malicious activity. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trustworthiness.

The nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and the domain resolves to the IP address 142.250.185.132, which is associated with AS15169 Google LLC in the United States. Notably, the domain does not have an SSL certificate, which can be a red flag for users expecting secure connections. The domain was registered through Dynadot LLC on October 29, 2025.

Analysis indicates that while the domain is currently offline, it has a history of being flagged by security vendors, and the lack of an SSL certificate combined with the low trust score and security blocklisting suggests that the domain was used for malicious purposes, specifically to impersonate Google. Defenders should monitor for any attempts to bring this domain back online and consider implementing additional security measures to prevent users from accessing it should it become active again. The exact content and nature of the impersonation are not yet fully analyzed, but given the evidence, it is prudent to treat this domain with caution.