ton[.]beefyhubs[.]cfd

The domain ton.beefyhubs.cfd was registered on October 21 2025 through Dynadot LLC and is currently taken offline. It resolves to IP address 142.251.140.164, an address owned by AS15169 Google LLC located in the United States. No TLS certificate is presented for the host, indicating that only unencrypted HTTP is available. DNS resolution is handled by brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, confirming the use of Cloudflare as the authoritative DNS provider.

The page title returned by the site is "Google", which aligns with the declared brand target of Google and the documented scam type of brand impersonation. The domain has been blocked by PhishDestroy and appears on a single security blocklist. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low confidence in the site’s legitimacy. VirusTotal analysis reports that three of ninety‑five scanning engines flag the domain as malicious, providing additional confirmation of its threat status.

These data points collectively indicate that ton.beefyhubs.cfd was deliberately crafted to impersonate Google and is being leveraged for fraudulent purposes. Defensive actions should include adding the domain and its resolving IP to network and URL filtering rules, monitoring DNS queries for any re‑appearance, and maintaining vigilance over the associated Cloudflare nameservers for rapid redeployment of related hosts. Organizations that rely on Google services should educate users to verify URLs before entering credentials, and incident responders should correlate any authentication attempts with this indicator set and update internal threat intelligence feeds accordingly.