bjgtp[.]cfd

This domain presents an elevated risk as a confirmed brand impersonation threat specifically targeting Google. The domain structure and configuration suggest an attempt to deceive users into believing they are interacting with legitimate Google services, potentially for credential theft or other fraudulent purposes. The domain's trust score of 0/100 from Gridinsoft further reinforces its malicious intent.

Infrastructure analysis reveals several critical indicators. The domain resolves to IPv6 address 2606:4700:3037::ac43:a0dc and was created on December 18, 2025, through NiceNIC International Group Co., Limited. It currently appears on 1 security blocklist, specifically PhishDestroy, and is in an offline status. VirusTotal analysis shows 3 out of 95 security vendors flagging this domain, indicating moderate detection across the security community. The page title was found to be empty, which is unusual for legitimate services.

For mitigation against this brand impersonation threat, users should avoid visiting this domain entirely. Organizations should add bjgtp.cfd to their web filtering and email security blocklists. Security teams should monitor for any subdomains or related domains registered through the same registrar or hosting infrastructure. Users should verify any Google-branded communications and access Google services only through official channels. Reporting this domain to additional threat intelligence platforms and security vendors can help expand detection coverage.