scr[.]beefy-hub[.]sbs

The domain scr.beefy-hub.sbs was registered through Dynadot LLC on October 25, 2025 and is currently listed as taken offline. DNS resolution points to the IPv4 address 142.251.167.103, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. The domain is delegated to Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, but no TLS certificate is presented, indicating that HTTPS connections are not available. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, suggesting a high likelihood of malicious intent.

The site appears on a single security blocklist and is explicitly blocked by PhishDestroy, reinforcing the assessment of threat. VirusTotal analysis shows that 10 of 95 security vendors have flagged the domain, providing independent corroboration of its malicious nature. The page title returned from the host is "Google," while the intelligence indicates the campaign is a brand impersonation targeting Facebook.

No further content analysis is available, and the offline status precludes real‑time payload inspection. Defenders should continue to enforce network‑level blocking of the resolved IP and the domain name, monitor for any future DNS re‑registration, and update endpoint protection signatures to reflect the observed vendor detections. Additionally, security teams should consider adding the domain to internal blocklists and share the indicator of compromise with threat‑intel communities to aid broader detection efforts.