send[.]airdropsalert[.]us

On July 24, 2026, analysis of the domain send.airdropsalert.us indicates that the site is currently taken offline. The domain was registered on October 18, 2025 through Dynadot LLC and uses Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. DNS resolution points to the IP address 192.178.155.105, which is assigned to AS15169 Google LLC in the United States. No TLS certificate is presented, so connections would be unencrypted. The page title returned by the server is "Google", and the infrastructure is classified as a crypto‑scam that impersonates the Google brand.

VirusTotal records show that 11 of 93 scanning engines flagged the host, and the domain appears on one external blocklist, where it is listed by PhishDestroy. Independent scoring from Gridinsoft assigned a trust rating of 0 out of 100. These indicators collectively suggest a high likelihood of malicious intent despite the current offline status. Uncertainty remains regarding the exact content served when the site was active, as no page capture is available and the domain does not present an SSL certificate to enable safe inspection.

The limited number of detections (11/93) implies that many scanners have not identified the payload, which could indicate a low‑profile or rapidly evolving kit. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurrection of the host, and add the IP address 192.178.155.105 to threat‑intel feeds. Additional scrutiny of traffic to Cloudflare name servers and the registrar Dynadot may help identify related campaigns. Continuous re‑scanning with multiple vendors is advised to capture any future changes in detection status.