magma[.]beefyhubs[.]cfd

The domain magma.beefyhubs.cfd was registered on October 21, 2025 through Dynadot LLC and is currently taken offline. DNS resolution points to the IP address 172.217.18.4, which belongs to AS15169 owned by Google LLC and is located in the United States. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. No TLS certificate is presented for the site, meaning connections would be unencrypted if the domain were reachable.

A single security blocklist has flagged the domain, and PhishDestroy is recorded as having blocked it. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain as malicious, providing modest corroboration of its threat profile. The page title returned by the HTTP response is "Google", while the documented scam type is a brand impersonation targeting Facebook. This mismatch between the page title and the advertised target suggests an attempt to mislead automated classifiers.

Evidence is limited to the metadata described; the actual content of the site has not been captured. Defenders should add the domain to URL filtering policies, monitor DNS queries for the associated IP and nameservers, and consider updating threat‑intel feeds with the observed indicators. Continuous re‑evaluation is advised in case the domain is re‑hosted or the threat actor re‑activates the infrastructure.