crv[.]beefyhubs[.]xyz

This domain was assessed at an elevated risk level due to a specific brand impersonation threat targeting Gmail users. The domain crv.beefyhubs.xyz was registered on October 22, 2025, through Dynadot LLC, and resolved to IP address 142.251.35.164. The page title was set to "Google" to deceive visitors into believing they were accessing a legitimate Gmail login page, but the site is now offline.

Technical indicators reveal that 14 out of 95 security vendors on VirusTotal flagged this domain as malicious, and it appears on one security blocklist. The domain lacked an SSL certificate, which is a significant red flag for any login page. The combination of a recently created domain, lack of encryption, and high vendor flagging strongly suggests a credential harvesting operation.

For users who may have encountered this domain, PhishDestroy advises never entering credentials on unverified pages. Since this site impersonated Gmail, users should change their Gmail password immediately if they suspect exposure and enable two-factor authentication. Always verify the URL in the browser address bar before logging into any account, and report phishing attempts to the relevant platforms.