starknet[.]beefyhubs[.]click

The domain starknet.beefyhubs.click was registered on October 22, 2025 through Dynadot LLC. Its authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. DNS resolution points to the IPv4 address 142.250.186.164, an address owned by Google LLC (AS15169) and geolocated in the United States. No TLS certificate was observed for the host, suggesting it was serving only HTTP or an improperly configured HTTPS service. The HTTP response returned a page title of “Google”, which does not correspond to the advertised impersonation of the Starknet brand and may indicate a placeholder or misconfiguration.

Security intelligence shows the domain is listed on a single blocklist and has been specifically flagged by PhishDestroy as a brand‑impersonation site targeting Starknet. VirusTotal scans reported three positive detections out of ninety‑five scanners, confirming that a subset of security products recognize malicious behavior associated with the domain. Additionally, Gridinsoft assigned a trust score of 0 / 100, reinforcing a low‑reputation assessment. The site’s current status is offline, preventing direct inspection of content, redirects, or credential‑collection mechanisms; therefore the exact payload or phishing form used remains unknown.

Despite limited blocklist exposure, the positive VirusTotal detections and the zero trust score provide concrete evidence of malicious intent. Defenders should block the domain and its resolved IP address at perimeter firewalls and DNS filtering layers. Monitoring of the associated Cloudflare nameservers and the Google‑owned IP range for new registrations or similar activity is recommended, as the threat actor may reuse the same infrastructure under a different domain.