polkadot[.]beefyhubs[.]click

On 22 October 2025 the domain polkadot.beefyhubs.click was registered through Dynadot LLC. The domain resolves to the IP address 142.250.74.196, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. Authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented for the host, indicating that HTTPS connections are not available. The site’s HTML title is reported as "Google", matching the declared brand target of Google and the listed scam type of brand impersonation.

The domain appears on a single security blocklist, PhishDestroy, which has taken the domain offline. VirusTotal analysis reports three detections out of ninety‑five scanned engines, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious classification. The combination of a brand‑matching page title, lack of encryption, low trust rating, and multiple vendor detections suggests that the domain was used to host a counterfeit Google landing page intended to harvest credentials or otherwise deceive users.

Current public measurements show the domain is no longer reachable, but the infrastructure—registered registrar, hosting IP, and Cloudflare nameservers—remains observable and could be reused for future campaigns. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and nameserver pair, and add the host to internal threat‑intel feeds. Incident response teams should also review any recent authentication attempts to Google services that originated from the IP range or from this exact hostname, and consider credential reset procedures if compromise is suspected.