googledrivemovies-rd[.]pages[.]dev

The domain googledrivemovies-rd.pages.dev has been identified as a brand_impersonation threat targeting Google. The site, titled 'Google Drive Movies – Watch Free Movies & TV Shows in High Quality,' is currently offline but was actively impersonating Google’s services to deceive users into accessing fraudulent content. Analysis indicates this domain was designed to mimic legitimate streaming or file-sharing platforms under the Google brand umbrella. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.9. It was created on April 25, 2026, and has been flagged by 11 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100. Technical indicators include the use of HSTS, Cloudflare infrastructure, and HTTP/3, alongside an SSL certificate issued by Google Trust Services, which may have contributed to its initial perceived legitimacy. The domain is currently offline, but its prior activity warrants caution. Organizations and users are advised to block the domain and its associated IP address (172.66.47.9) at the network level. Security teams should monitor for any resurgence of this domain or similar impersonation attempts under Cloudflare’s pages.dev subdomains. Additionally, user education on recognizing brand_impersonation tactics, particularly those leveraging trusted cloud providers, is recommended to mitigate future risks.