astr[.]airdropsalert[.]bar

As of July 23, 2026, the domain astr.airdropsalert.bar is confirmed to be a crypto scam impersonating Google. The domain was registered through Dynadot LLC on October 20, 2025. Infrastructure analysis reveals that the domain uses nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating a common setup for domains hosted on Cloudflare. The domain has been flagged by PhishDestroy and is currently offline, suggesting that it has been taken down or is no longer active.

Google Safe Browsing has identified this domain as engaging in social engineering, which is consistent with the reported scam type. Gridinsoft has assigned the domain a trust score of 0/100, indicating a very high level of risk. The domain resolves to the IP address 2a00:1450:4001:81c::2004, which is associated with Google LLC in Germany (DE). Analysis indicates that 15 out of 95 security vendors on VirusTotal have flagged this domain as malicious.

This combination of indicators strongly suggests that the domain was used to impersonate Google for the purpose of a crypto scam. Defenders should remain vigilant and ensure that any residual infrastructure associated with this domain is blocked or monitored to prevent potential reinfection or similar attacks. The exact content of the webpage is not yet analyzed, but the page title 'Google' and the high risk level are clear indicators of brand impersonation. Given the domain's current status and multiple red flags, it is advisable to continue monitoring related IP addresses and nameservers for any signs of reactivation.