akt[.]beefyhubs[.]click

Analysis of akt.beefyhubs.click indicates a confirmed brand impersonation campaign targeting Google, as evidenced by the domain's page title ('Google') and explicit classification in threat intelligence sources. The domain was registered on October 22, 2025, through Dynadot LLC and resolves to IP 142.250.186.36, hosted on AS15169 (Google LLC), though this hosting alignment does not confirm legitimacy. No SSL certificate is present, increasing susceptibility to interception.

The domain appears on one security blocklist (PhishDestroy) and is flagged by 5 of 95 security vendors on VirusTotal, though the specific detection rules are not detailed in available intelligence. Trust scores from Scamadviser (1/100) and Gridinsoft (0/100) further support malicious classification. Infrastructure analysis reveals Cloudflare nameservers (brenna.ns.cloudflare.com, hassan.ns.cloudflare.com), a common tactic to obscure origin and evade takedowns.

The domain is currently offline, but defenders should treat any reactivation as high-risk. No evidence of a phishing kit or exact scam mechanism (e.g., credential harvesting, fake login portal) is present in the data, though the brand impersonation classification suggests a likely credential theft or fraudulent service scheme. Network defenders are advised to block the domain and IP at perimeter controls, monitor for related subdomains under beefyhubs.click, and alert users to potential Google-themed phishing attempts referencing this infrastructure.