polymarket[.]beefyhubs[.]sbs

The domain polymarket.beefyhubs.sbs was registered on October 21, 2025 through Dynadot LLC and presently resolves to the IP address 142.250.186.68, which is assigned to AS15169 Google LLC in Germany. The site presents a page title of "Google" and is explicitly listed as impersonating the Google brand. No TLS certificate is available; the service is delivered over HTTP only, which further reduces credibility and hampers integrity verification.

Infrastructure analysis shows the domain is delegated to Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, a common choice for fast‑flux or temporary phishing infrastructure. The domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal scans indicate that 14 out of 95 vendors have identified the domain as malicious, reinforcing the suspicion of a phishing campaign.

As of the report date (July 23, 2026) the domain is taken offline, limiting immediate exposure but preserving forensic artefacts for threat‑intelligence sharing. Defenders should continue to block any resolution of polymarket.beefyhubs.sbs at network perimeter devices, update URL filtering rules, and monitor for any resurgence of the same host or related sub‑domains. Because the site’s content beyond the page title has not been captured, analysts should treat the lack of visual or functional details as a gap and prioritize collection of any future payloads if the domain reappears.