hubs-beefyapp[.]sbs

This domain, hubs-beefyapp.sbs, is flagged for brand_impersonation targeting Google, presenting a fraudulent login portal designed to harvest user credentials. The site mimics legitimate Google authentication pages, leveraging identical page titles and SSL certificates issued by Google Trust Services to appear authentic. Such tactics are commonly employed in credential theft campaigns, where victims are tricked into entering sensitive information under false pretenses. Analysis indicates the domain was registered on November 09, 2025, through Dynadot LLC, a registrar frequently exploited for malicious infrastructure. Security vendors on VirusTotal flagged the domain at a rate of 5/95, signaling moderate detection but sufficient concern for elevated risk classification. Infrastructure analysis reveals the domain resolves to the IP address 142.250.186.164, a legitimate Google-owned address, which may have been spoofed to evade initial scrutiny. Additionally, the domain appears on one security blocklist, and technologies such as Bootstrap, jQuery, Cloudflare, and HTTP/3 were detected, further aligning with tactics used in sophisticated phishing operations. Users who visited hubs-beefyapp.sbs should immediately revoke any entered credentials, particularly Google account passwords, and enable multi-factor authentication on all critical accounts. It is recommended to scan local devices for malware or unauthorized access, as fraudulent login pages may deploy additional payloads. Monitor financial and communication platforms for unusual activity, and report the incident to relevant security teams or abuse channels for further investigation. Organizations should update internal blocklists to prevent future access to this domain and similar impersonation attempts.