magma[.]beefyhubs[.]club

Analysis of magma.beefyhubs.club shows a short‑lived domain registered through Dynadot LLC on 22 Oct 2025. The site resolves to 142.250.72.100, an address owned by AS15169 Google LLC and located in the United States, a common hosting location for legitimate Google services. DNS is delegated to Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of capture. The page title returned “Google”, and the domain is flagged as impersonating the Google brand.

Independent blocklists PhishDestroy and ScamSniffer have listed the domain, and two additional security blocklists contain it. VirusTotal scanned the domain and 13 of 95 scanners reported it as malicious. The current operational status is offline, suggesting the site has been taken down or is no longer serving content. Defenders should treat the domain as a confirmed brand‑impersonation vector despite the lack of an SSL certificate and the legitimate‑looking IP range.

The combination of registrar information, blocklist presence, and multiple vendor detections provides sufficient evidence to add the domain to internal deny‑list or firewall rules. Monitoring of the associated IP address for any future re‑use with malicious payloads is advised, as the same host can be repurposed. Continuous re‑evaluation of the domain’s status on threat‑intel platforms is recommended, because the offline state may change if the actors reactivate the site. Logging of any DNS queries to the domain and correlation with user reports of unexpected Google‑related communications will help surface potential exploitation attempts.