plume[.]beefyhubs[.]click

As of July 22, 2026, the domain plume.beefyhubs.click has been identified as a brand impersonation phishing site targeting Google. The domain was created on October 22, 2025, and is currently offline. The page title 'Google' suggests that the site was designed to mimic Google's official web presence, potentially to deceive users into providing sensitive information. The domain is registered through Dynadot LLC and utilizes Cloudflare nameservers, specifically brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Infrastructure analysis reveals that the domain resolves to the IP address 142.250.185.196, which is located in the United States and is associated with the AS15169 network operated by Google LLC. This indicates that the domain was either hosted on Google's infrastructure or was configured to resolve to a Google IP, possibly to add a layer of credibility to the impersonation. The domain has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. Security vendors have flagged this domain, with 3 out of 95 vendors identifying it as malicious. The domain also appears on one security blocklist, further underscoring its risky nature.

PhishDestroy has blocked the domain, suggesting that it has been recognized as a threat by security measures. Despite the domain being offline, defenders should remain vigilant and ensure that it is not reactivated for malicious purposes. It is recommended to monitor for any signs of activity and update security policies to block this domain and similar impersonations. The exact content of the site has not been analyzed, but the page title and domain registration details provide strong evidence of its intent to impersonate Google.