usual[.]airdropalert[.]us

On July 23, 2026, the domain usual.airdropalert.us is flagged as a crypto scam impersonating Google. The domain has an elevated risk level and is currently offline. This domain was registered through Dynadot LLC and created on October 19, 2025. The nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating that Cloudflare is handling the DNS services.

However, the domain resolves to an IP address 172.253.63.106, which is associated with Google LLC (AS15169), suggesting a possible attempt to leverage Google’s reputation for legitimacy. The page title found is 'Google,' further reinforcing the brand impersonation. The domain is listed on one security blocklist, PhishDestroy, which has taken it offline. Analysis indicates that the domain lacks an SSL certificate, potentially making it less secure and more suspicious.

Out of 93 security vendors on VirusTotal, 12 have flagged this domain, indicating a moderate level of concern within the security community. Defenders should remain vigilant and monitor this domain for any reactivation or similar activity on related domains. Given the association with a crypto scam and brand impersonation, users are advised to avoid interacting with this domain and to report any suspicious activity to their security teams or local authorities. The exact content of the website has not been directly analyzed, but the available evidence strongly suggests a fraudulent intent.