bluefin[.]beefyhubs[.]cfd

The domain bluefin.beefyhubs.cfd was registered on 21 October 2025 through Dynadot LLC. DNS resolution points to the IP address 142.250.185.100, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. The authoritative name servers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. No TLS certificate is presented, leaving the site accessible only over HTTP. The page title returned by the server is "Google", and the domain is explicitly listed as impersonating the Google brand, matching the declared scam type of brand impersonation.

Threat intelligence shows the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis reports that four of ninety‑five scanning engines have flagged the domain as malicious, confirming a modest but non‑trivial detection rate. The Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trust in the host. The domain’s current status is recorded as taken offline, suggesting that the malicious site may have been removed or is no longer reachable.

Evidence confirms that the infrastructure leverages legitimate Google‑owned IP space, a tactic often employed to increase credibility and evade network‑level filters. However, the absence of an SSL certificate and the low detection count leave uncertainty regarding the current activity of the site. Defenders should continue to block the domain at perimeter devices, monitor DNS queries for the exact name and its subdomains, and update URL filtering rules to include the associated IP address. Additional scanning of the domain, if it becomes reachable again, is recommended to capture any changes in payload or hosting configuration.