bob[.]beefyhubs[.]bond

PhishDestroy has identified the domain bob.beefyhubs.bond as a brand impersonation threat specifically targeting Gmail users. The domain is currently offline, but its malicious intent was confirmed through multiple security indicators. This domain was created on October 26, 2025, and registered through Dynadot LLC, resolving to IP address 142.250.186.68. At the time of analysis, the page title displayed "Google," suggesting a fake login page designed to steal credentials.

Technical analysis reveals that bob.beefyhubs.bond was flagged by 5 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. It appears on one security blocklist, and no SSL certificate was detected, which is a common red flag for phishing sites. The domain's registration and hosting details point to a typical setup for malicious campaigns, with a recent creation date and a registrar known for minimal oversight.

Although the domain has been taken offline, users should remain vigilant. PhishDestroy recommends avoiding any interaction with this domain and verifying the legitimacy of any Gmail login page by checking the URL carefully. Always navigate directly to mail.google.com and enable two-factor authentication for added security. If you encounter similar suspicious domains, report them to PhishDestroy to help protect others.