chainlink[.]beefyhubs[.]life

This domain is flagged as a high‑risk brand‑impersonation infrastructure targeting Facebook users. The domain chainlink.beefyhubs.life was registered through Cloudflare, Inc. and resolves to the IP address 172.253.62.105, which belongs to AS15169 Google LLC in the United States. No SSL certificate is presented, indicating that the site is served over plain HTTP. The HTTP response includes a page title of “Google”, which does not correspond to the claimed Facebook impersonation and suggests that the content has not been publicly analysed.

VirusTotal recorded 15 detections out of 95 scanned security vendors, and Google Safe Browsing classifies the URL as a social‑engineering threat. Independent blocklists report the domain as blocked by PhishDestroy and list it on a single security blocklist. Reputation services assign extremely low trust scores – Scamadviser rates the site 1 / 100 and Gridinsoft 0 / 100 – reinforcing the malicious assessment.

The infrastructure currently appears offline, and the nameserver query returned NS_NOT_FOUND, indicating possible DNS tampering or removal. Defenders should continue to block the domain and its resolved IP at perimeter and DNS filters, monitor for any re‑registration or resurrection of the host, and consider adding the IP to threat‑intel feeds. Ongoing observation of Cloudflare‑hosted domains targeting Facebook is advised, as the provider is commonly abused for rapid deployment of impersonation pages.