airdropalert[.]now

This domain has been assessed as a high-risk threat, specifically a brand impersonation attack targeting Google. The site was designed to deceive users into believing they were interacting with a legitimate Google service. It has since been taken offline, but the underlying infrastructure remains notable.

Technical indicators are compelling. VirusTotal flagged the domain at 18 out of 95 security vendors. The site resolved to IP address 142.251.16.147 and was registered through Cloudflare, Inc. Its SSL certificate was issued by Google Trust Services, and the page title explicitly said "Google". Google Safe Browsing categorically labeled it as phishing, and it appears on one security blocklist. These data points collectively confirm the malicious intent.

Users should exercise extreme caution with any unsolicited communications referencing airdropalert.now. Never enter credentials or personal information on pages reached via unexpected links or emails. Always verify URL legitimacy by manually navigating to the official Google domain. PhishDestroy recommends reporting any similar domains to security teams and maintaining updated anti-phishing tools.