ton[.]beefyhub[.]club

The domain ton.beefyhub.club is a phishing site engaged in brand impersonation, specifically targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. No crypto drainer kit was detected. The site is currently taken offline, but prior activity indicates it was actively used for malicious purposes.

Technical indicators confirm the domain's suspicious nature. ton.beefyhub.club was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through Dynadot LLC on October 21, 2025, and resolved to the IP address 142.250.185.164, hosted on Google LLC's infrastructure (AS15169). The domain lacked an SSL certificate, and its nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The observed page title was 'Google', reinforcing its impersonation of the brand. Gridinsoft assigned it a trust score of 0/100.

Users who may have interacted with ton.beefyhub.club should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the domain to Google's phishing reporting tool and to platforms like PhishTank or the Anti-Phishing Working Group to aid in broader takedown efforts. If financial or personal data was exposed, consider contacting relevant institutions to secure accounts.