flow[.]beefyhubs[.]sbs

The domain flow.beefyhubs.sbs was confirmed to be involved in a brand impersonation scam targeting Facebook. The domain was registered through Dynadot LLC on October 21, 2025. Analysis indicates that the site was designed to deceive users into believing they were interacting with legitimate Facebook services. However, the page title found during the analysis was 'Google,' which may indicate a reused or repurposed template or a mistake in the scammer's setup. The domain has been taken offline as of the report date, July 23, 2026.

Despite the domain's current offline status, it was previously associated with a US-based IP address (142.251.40.228) belonging to Google LLC, as identified by the ASN (AS15169). The domain lacks an SSL certificate, which is a common feature of legitimate websites, further raising suspicions. PhishDestroy has blocked this domain, and it appears on one security blocklist, indicating that it has been recognized as a threat by the cybersecurity community. Scamadviser and Gridinsoft have assigned this domain trust scores of 1/100 and 0/100, respectively, reflecting the high level of risk associated with the site.

While 14 of 95 security vendors on VirusTotal flagged this domain as malicious, it is important to note that not all vendors may have detected the threat. Defenders should remain vigilant and ensure that their systems are configured to block this domain, even though it is currently offline. Additionally, users should be educated to verify the URL and SSL status of any website before entering personal information. Further analysis and monitoring are recommended to detect any potential resurfacing of this domain or similar threats.