mole[.]beefyhubs[.]life

Analysis of mole.beefyhubs.life shows that the domain was registered through Dynadot LLC on 26 October 2025. The site does not present an SSL certificate, indicating that HTTPS was not configured. DNS resolution points to IP address 142.250.184.228, which belongs to AS15169 Google LLC and is geolocated in the United States. Despite the IP belonging to Google’s infrastructure, the domain is not owned by Google and is being used for brand impersonation targeting Google, as indicated by the page title "Google" and the explicit brand target in the intelligence.

The domain appears on a single public blocklist, PhishDestroy, and has been flagged by 14 of 95 security vendors on VirusTotal, reflecting a moderate level of detection across the security community. The current operational status is offline, and the domain has been taken down. The combination of a recent creation date, lack of TLS, and presence on a phishing blocklist suggests a short-lived malicious campaign rather than a legitimate service. Defenders should ensure that the IP address 142.250.184.228 is added to network-level deny lists only for this specific hostname, as the IP is otherwise associated with legitimate Google services.

Updating URL filtering rules to block the fully qualified domain name, and adding mole.beefyhubs.life to internal phishing blocklists, will prevent end-users from accessing the site should it be re-hosted. Continuous monitoring of DNS queries for the domain and periodic re-scans on VirusTotal are recommended to detect any re-activation. Because the site is currently offline, immediate mitigation focuses on preventive blocking rather than incident response.