degen[.]beefy-hub[.]lol

The domain degen.beefy-hub.lol was registered on October 25, 2025 through Dynadot LLC and is served by the Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. DNS resolution points to IP address 142.251.140.164, which belongs to AS15169 Google LLC and is located in the United States. Despite the IP belonging to Google’s infrastructure, the site lacks an SSL certificate and presents a page title of "Google," indicating an attempt to impersonate the Google brand.

Google Safe Browsing has flagged the domain for social engineering, and VirusTotal records show that 15 of 95 security vendors have identified it as malicious. The site is listed on a single security blocklist and has a Gridinsoft trust score of 0 out of 100, reinforcing the assessment of high risk. PhishDestroy has also taken the domain offline, and current monitoring confirms the site is no longer reachable.

The evidence confirms a brand‑impersonation campaign targeting Google users, but the exact content and payload of the page remain unverified because the site is offline and no TLS handshake was observed. Defenders should immediately block the domain and its associated IP address at perimeter defenses, incorporate the domain into internal blocklists, and monitor for any future re‑registration or similar sub‑domains using the same registrar or nameserver pattern. Continuous watch of Google Safe Browsing, VirusTotal, and other threat‑intel feeds is advised to detect any resurgence of the campaign.