cetus[.]beefyhubs[.]bond

The domain cetus.beefyhubs.bond was registered on October 26, 2025 through Dynadot LLC and is hosted on Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. DNS resolution points to IP address 142.250.81.228, which belongs to AS15169 Google LLC and is geolocated in the United States. No TLS certificate is presented for the site, indicating that HTTPS is not enforced. The single observed page title is "Google," matching the declared brand target and confirming a brand‑impersonation intent.

The domain appears on one security blocklist, PhishDestroy, which has actively blocked the domain. VirusTotal analysis shows that four of ninety‑five scanning engines flagged the domain, providing additional confirmation of malicious activity. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk. The site is currently offline, which may be the result of takedown actions or temporary suspension.

Evidence is limited to the listed infrastructure and detection data; no payload samples, login pages, or further content have been captured. Defenders should continue to monitor the IP address for any residual traffic, enforce blocklists that include cetus.beefyhubs.bond, and update endpoint protection signatures to reflect the four VirusTotal detections. Organizations that rely on Google services should educate users about the lack of a valid SSL certificate and the misleading page title, and consider adding the domain to internal deny lists until the threat is fully mitigated.