cn[.]ey1dwqddmu2x[.]com

This domain, cn.ey1dwqddmu2x.com, is identified as a brand impersonation threat specifically targeting Google. Analysis confirms the domain is currently offline, though it previously hosted content masquerading as a legitimate service under the title 'ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴,' which bears no relation to the impersonated brand. Infrastructure analysis reveals the domain was registered through Wild West Domains, LLC on September 13, 2022. It resolves to the IP address 45.200.67.206, located in Hong Kong under AS133847 (Anpple Tech Enterprise). Security vendors on VirusTotal flagged this domain, with 17 out of 95 engines detecting malicious activity. The domain appears on two security blocklists and is associated with an SSL certificate issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R3). Additional technical indicators include its prior blocking by PhishDestroy and PhishingDB. Given its current offline status, this domain poses a reduced immediate threat. However, organizations should maintain vigilance by updating security controls to block the domain and its associated IP (45.200.67.206) at the network perimeter. Security teams are advised to monitor for any resurgence of activity, review logs for historical connections to this domain, and educate users on recognizing brand impersonation tactics. If encountered, any interaction with this domain should be treated as a potential security incident requiring investigation.