omni[.]beefyapps[.]cfd

This report analyzes the domain omni.beefyapps.cfd, which was observed impersonating the Google brand. The site presented a page with the title "Google," indicating an attempt to deceive users into believing they were interacting with a legitimate Google service. The threat posed is brand impersonation, a common vector for phishing attacks designed to harvest credentials or personal information from unsuspecting visitors.

Technical analysis provides concrete evidence of the site's malicious nature. VirusTotal flagged the domain with 5 detections out of 95 security vendors, and it was specifically flagged by ChainPatrol, CyRadar, ESET, SOCRadar, and Trustwave. The domain is hosted on IP address 172.253.62.105, located in the United States and associated with AS15169 Google LLC. It was registered through Dynadot LLC on 2025-10-24. The site lacks SSL certificate encryption, and its nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. GridinSoft trust rating is 0 out of 100.

As of the latest check, the domain is reported as DOWN/OFFLINE. The risk level is considered high due to the confirmed impersonation of a major brand, the presence on multiple security blocklists, and the low trust rating. Users should avoid any interaction with this domain.