abstract[.]beefyhubs[.]bond

The domain abstract.beefyhubs.bond was registered through Dynadot LLC on 26 October 2025 and is presently taken offline. Infrastructure analysis shows it resolves to the IPv4 address 172.253.62.106, which belongs to AS15169 operated by Google LLC and is located in the United States. The domain is hosted on Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, a common configuration for fast‑flux or transient phishing infrastructure. No TLS certificate was observed, indicating the site was served over HTTP only.

The page title returned by the server is “Google,” and the listed scam type is brand impersonation targeting the Google brand. Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly suspicious rating. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. VirusTotal analysis recorded detections by eight of ninety‑five scanning engines, confirming malicious intent.

Given the combination of a Google‑owned IP address, lack of encryption, low trust score, and multiple vendor flags, defenders should add the domain to deny‑list rules, monitor DNS queries for the associated IP range, and enforce strict HTTP‑to‑HTTPS redirection policies to prevent accidental connections. Continuous observation of the Cloudflare name server entries is recommended, as they may be repurposed for future campaigns. The evidence indicates a focused attempt to impersonate Google, and proactive blocking is advised to mitigate potential credential‑theft risk.