chainlink[.]beefyhubs[.]club

The domain chainlink.beefyhubs.club was registered through Dynadot LLC on 22 Oct 2025. DNS resolution points to 142.251.32.100, an address owned by Google LLC (AS15169) in the United States. The domain is delegated to the Cloudflare authoritative nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No TLS certificate is presented, indicating that the site served only over HTTP when it was reachable.

The sole HTML title retrieved reads “Google”, matching the declared brand target and confirming the classification as a brand‑impersonation campaign. VirusTotal analysis recorded 11 of 95 scanning engines flagging the domain as malicious, and the Gridinsoft trust score is 0 / 100, reflecting a high confidence of malicious intent. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

Current observations show the domain taken offline, but historical activity suggests it was used to lure victims by masquerading as a Google resource. Defenders should add chainlink.beefyhubs.club to local DNS blocklists and firewall deny lists, monitor for any re‑registration of the same second‑level or similar third‑level labels, and treat traffic to the associated IP address with caution, especially when observed alongside Cloudflare name‑server patterns. Continuous threat‑intel sharing with upstream providers is advised to capture any resurgence of the infrastructure.