polymarket[.]beefy-hub[.]sbs

This domain, polymarket.beefy-hub.sbs, was registered through Dynadot LLC on October 25, 2025 and is currently marked as offline. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating reliance on Cloudflare's DNS service. No TLS certificate is associated with the host, so HTTPS connections are not available. DNS resolution returns the address 142.251.40.164, an IP owned by Google LLC (AS15169) located in the United States.

The page title reported by the crawler is "Google", and the intelligence classifies the site as a brand‑impersonation campaign targeting Google. VirusTotal analysis shows that 14 of 95 scanned security vendors flagged the domain as malicious, and the domain appears on a single public blocklist. Additional reputation systems assign a Gridinsoft trust score of 0 out of 100 and report blockage by PhishDestroy.

These indicators collectively suggest a high confidence that the domain was used for malicious impersonation, despite the fact that the underlying IP belongs to the legitimate target organization. Defenders should continue to block the domain at the DNS layer, add the name to internal phishing blocklists, and monitor for any future re‑registration or similar sub‑domain patterns under the same registrar or Cloudflare nameservers. Because the site is already taken offline, immediate removal of active payloads is not required, but continuous threat‑intel correlation is advised to detect potential copycat campaigns that reuse the same brand‑targeting tactics.