recall[.]beefyapp[.]biz

The domain recall.beefyapp.biz was registered through Dynadot LLC on October 05, 2025 and is currently reported as offline. It resolves to the IP address 172.217.18.4, which belongs to AS15169 Google LLC and is geolocated in the United States. The site presents the page title "Google" and is classified as a brand impersonation targeting Google. No SSL certificate is observed for the domain, and the lack of TLS may hinder encrypted communication, contrasting with the legitimate Google infrastructure that uniformly employs HTTPS.

The domain uses Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, a common choice for fast DNS resolution and potential concealment of the true hosting environment. Detection data shows that seven of ninety-three security vendors on VirusTotal flagged the domain, indicating a modest level of consensus about its malicious nature. It appears on a single security blocklist and has been blocked by the PhishDestroy service. The Gridinsoft trust score of 0 out of 100 further underscores its low reputation.

While the use of a legitimate Google IP could be an attempt to masquerade as an authentic service, the absence of a valid certificate and the low trust score suggest a fraudulent operation. Defenders should ensure the domain is added to internal blocklists, monitor DNS queries for any resurgence, and consider correlating activity with other domains that share the same Cloudflare nameservers or similar registration patterns. Ongoing vigilance is recommended to detect potential re‑use of the domain or related infrastructure in future brand‑impersonation campaigns.