graph[.]beefyapp[.]info

This domain, graph.beefyapp.info, was observed resolving to the IP address 142.250.184.196, which is announced by AS15169 Google LLC and geolocated to the United States. The host does not present an SSL/TLS certificate, and an HTTP request returns a page whose HTML title is exactly “Google”. The page title and the declared brand target of Google indicate a brand‑impersonation attempt, although the actual page content has not been captured because the site is currently offline. The domain is registered through Cloudflare, Inc., a provider frequently used for fast‑flux or proxy services, and the infrastructure was flagged by PhishDestroy and listed on a single public security blocklist.

VirusTotal analysis shows that 16 of 95 scanning engines flagged the domain as malicious, reinforcing the suspicion of abuse. Independent trust scoring from Gridinsoft assigns a score of 0 out of 100, effectively indicating no confidence in the site’s legitimacy. No SSL certificate, combined with the lack of HTTPS, further reduces trustworthiness. While the IP belongs to Google’s own network, the use of a Google‑owned address for a counterfeit site suggests possible sub‑domain hijacking or abuse of a misconfigured virtual host.

Defenders should add graph.beefyapp.info to domain‑based blocklists, monitor DNS queries for this name, and consider correlating traffic to the associated IP with other suspicious activity. Because the site is offline, continuous re‑resolution checks are recommended to detect any re‑appearance. Additional investigation of the Cloudflare account that provisioned the domain may yield further indicators of related infrastructure.