astr[.]beefy-hub[.]lol

This domain, astr.beefy-hub.lol, was observed as a high‑risk brand‑impersonation campaign targeting Google. The domain was registered through Dynadot LLC on 25 October 2025 and resolves to the IP address 142.250.181.228, which belongs to AS15169 (Google LLC) and is geolocated in the United States. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare DNS services. No TLS certificate was presented for the site, meaning the connection would be unencrypted if the site were reachable.

Google Safe Browsing has flagged the domain for social engineering, and PhishDestroy has listed it as blocked. VirusTotal reports that ten of ninety‑five security vendors have flagged the domain, reflecting a moderate consensus of malicious intent. The site appears on a single security blocklist and received a Gridinsoft trust score of 0 out of 100, reinforcing the assessment of high risk. The page title returned during the brief crawl was “Google”, matching the declared brand target.

Current status is offline, so active verification of the payload or page content is not possible. Defenders should continue to block the domain at network perimeter, add the IP address 142.250.181.228 to deny‑lists, and monitor for any future re‑registration. Continuous observation of Cloudflare DNS changes is advised, as the infrastructure could be repurposed. The combination of registrar information, Cloudflare name servers, lack of TLS, and multiple security vendor detections provides sufficient evidence to classify astr.beefy-hub.lol as a malicious brand‑impersonation vector.