polymarket[.]beefyapps[.]cfd

This domain, polymarket.beefyapps.cfd, is flagged as a brand impersonation phishing site targeting Google, based on available evidence. Registered on October 24, 2025, through Dynadot LLC, the domain resolves to the IP address 142.250.185.68, which is associated with AS15169 (Google LLC) in the United States. The page title is explicitly 'Google,' aligning with the identified scam type of brand impersonation. Infrastructure analysis reveals the domain uses Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) but lacks an SSL certificate, a common but not definitive indicator of phishing activity.

Detection data is limited: the domain appears on one security blocklist (PhishDestroy) and is flagged by 3 of 95 security vendors on VirusTotal, though the specific detection context is not detailed. Gridinsoft assigns a trust score of 0/100, further suggesting malicious intent. As of the report date, the domain is offline, though defenders should treat it as a confirmed threat until further analysis confirms remediation.

The registration age (less than a year) and use of a low-reputation registrar may indicate an attempt to evade longer-term scrutiny. Defenders are advised to block the domain at the DNS or proxy level, monitor for re-activation, and review logs for connections to the IP 142.250.185.68 or associated Cloudflare nameservers. While the exact phishing kit or payload is not confirmed, the combination of brand impersonation, lack of SSL, and low detection coverage warrants elevated vigilance.