ewt[.]beefyapp[.]cfd

The domain ewt.beefyapp.cfd has been identified as engaging in brand impersonation, specifically targeting Google. This type of threat often involves creating a deceptive website that mimics the look and feel of the legitimate brand to trick users into divulging sensitive information. The domain does not employ an SSL certificate, further increasing the risk of data interception and manipulation.

Technical indicators for ewt.beefyapp.cfd include a VirusTotal score of 14/95, indicating that 14 out of 95 security vendors have flagged this domain as potentially malicious. The domain is registered through Dynadot LLC and resolves to the IP address 142.250.185.228, which is located in the United States and is associated with AS15169 Google LLC. The domain was created on October 02, 2025, and it appears on one security blocklist, specifically PhishDestroy. Additionally, the domain's Google Safe Browsing (GSB) status is currently not available, which may indicate a lack of recent security checks or updates.

The domain is currently offline, which suggests that it has been taken down by the registrar or hosting provider in response to security alerts. Despite its current offline status, the risk remains elevated due to the potential for the domain to be reactivated or redirected to a different malicious site. Users are advised to remain vigilant and avoid clicking on any links or entering sensitive information on any sites that appear to be impersonating Google. Security professionals should monitor the domain for any signs of reactivation and consider adding it to their blocklists to mitigate the risk.