send[.]beefyhubs[.]click

The domain send.beefyhubs.click was registered on October 22, 2025 through Dynadot LLC and is currently offline. DNS resolution points to 142.251.35.164, an address owned by Google LLC (AS15169) in the United States. The domain uses Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and does not present an SSL certificate, indicating that HTTPS was not enabled at the time of observation. The only visible web indicator is the page title "Google," which matches the declared brand target of Google and aligns with the listed scam type of brand impersonation.

The domain appears on a single security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation. VirusTotal analysis recorded two detections out of ninety‑five vendors, confirming that at least a minority of scanners flagged the site as malicious. No additional content analysis, Safe Browsing status, or OTX entries are provided. Defenders should immediately block DNS resolution for send.beefyhubs.click and any outbound connections to its resolved IP address, even though the IP belongs to a legitimate cloud provider, because the association with a brand‑impersonation campaign raises the risk of abuse.

Updating internal threat‑intel feeds with the domain, its registration details, and the observed blocklist entry will help mitigate future exposure. Continuous monitoring of traffic to 142.251.35.164 for anomalous patterns is advisable, and any newly observed HTTPS deployments should be re‑examined for potential credential‑harvesting pages. Given the elevated risk rating, organizations handling Google‑related credentials should treat this domain as a high‑confidence indicator of a targeted impersonation attempt.