recall[.]beefyhubs[.]bond

The domain recall.beefyhubs.bond is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google page to deceive users into entering sensitive information, such as login credentials. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, but its prior activity warrants caution.

Technical indicators confirm recall.beefyhubs.bond as a malicious domain. It was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and Fortinet. The domain was registered through Dynadot LLC on October 26, 2025, and resolves to the IP address 142.250.185.100, hosted on Google LLC's infrastructure (AS15169). It appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. No SSL certificate was issued for the domain, and its nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The observed page title was 'Google', reinforcing its impersonation of the brand.

Users who interacted with recall.beefyhubs.bond should immediately change any passwords entered on the site, particularly for Google accounts. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor accounts for unauthorized activity, such as unfamiliar logins or transactions. Report the domain to Google’s Safe Browsing team via their reporting tool and to the registrar, Dynadot LLC, to support takedown efforts. If financial or crypto accounts were accessed, contact the respective platforms for additional security measures.