dydx[.]beefyhubs[.]click

The domain dydx.beefyhubs.click was registered on 22 Oct 2025 through Dynadot LLC and is currently taken offline. Infrastructure analysis shows the domain resolves to IP 216.58.206.36, which belongs to AS15169 Google LLC and is geolocated in Germany. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare DNS services. No TLS certificate was observed, so connections would be unencrypted.

The only retrieved HTML title is “Google”, providing no indication of the intended malicious content. Threat intelligence classifies the site as a crypto‑scam that impersonates the dYdX platform. VirusTotal scans flagged the domain in three of ninety‑five security vendors, and the Gridinsoft trust score is 0 / 100, reflecting a highly malicious rating. The domain appears on one public blocklist and has been added to the PhishDestroy blocklist.

While the site is offline, the combination of a brand‑specific impersonation, a low trust score, and multiple vendor detections suggests it was actively used to lure victims into a cryptocurrency‑related fraud. Defenders should continue to block the domain at network perimeter devices, update DNS sinkhole lists, and monitor for any residual traffic to the associated IP address. Because the hosting IP belongs to a large cloud provider, any future malicious payloads may be served from the same address range, so vigilance on Google‑owned infrastructure is advised. Additional analysis of any cached content or archived snapshots could reveal the exact luring technique, but such data is not currently available.