bob[.]beefy[.]bar

This domain, bob.beefy.bar, is assessed as an elevated-risk brand impersonation site targeting Google, based on infrastructure and detection data collected as of July 24, 2026. The domain was registered on October 1, 2025, through Dynadot LLC and is currently offline. Analysis of its infrastructure reveals it was hosted on Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and resolved to the IP address 142.250.185.164, which is allocated to Google LLC (AS15169). Despite resolving to a Google-owned IP, this does not indicate legitimate affiliation, as threat actors frequently abuse reputable infrastructure to evade detection. The domain was flagged by 7 of 95 security vendors on VirusTotal, a low but non-zero detection rate that suggests malicious intent.

It appears on at least one security blocklist and is specifically blocked by PhishDestroy. Scamadviser assigned a trust score of 1 out of 100, further indicating high risk. The page title was recorded as 'Google,' aligning with the reported brand impersonation. No SSL certificate was present, which is atypical for legitimate services and increases the likelihood of phishing activity. Defenders should treat this domain as confirmed malicious for Google impersonation.

The absence of an SSL certificate, low trust scores, and detection by multiple security vendors provide concrete evidence of its fraudulent nature. While the domain is currently offline, monitoring for re-activation or related infrastructure (e.g., nameservers, registrar, or hosting patterns) is recommended. Historical resolution to a Google IP may be useful for identifying similar abuse patterns in future investigations. No evidence of a specific phishing kit or additional scam categorization is available at this time.