starknet[.]beefyhub[.]icu

The domain starknet.beefyhub.icu is a confirmed phishing site engaged in brand impersonation targeting Starknet, a cryptocurrency platform. It was designed to deceive users into believing they were interacting with the legitimate Starknet service, potentially leading to credential theft or financial fraud. As of the latest verification, starknet.beefyhub.icu has been taken offline, though it previously posed an elevated risk due to its active impersonation of a trusted brand.

Technical analysis of starknet.beefyhub.icu reveals 4 of 95 security vendors on VirusTotal flagged the domain, including ChainPatrol, CyRadar, and Forcepoint ThreatSeeker. The domain was registered through Dynadot LLC on October 19, 2025, and resolved to the IP address 172.253.115.103, hosted by Google LLC in the US. It appeared on one security blocklist, PhishDestroy, and had no SSL certificate. The observed page title was 'Google', which may have been used to mislead users. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and Gridinsoft assigned a trust score of 0/100.

Users who interacted with starknet.beefyhub.icu should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or suspicious activity. If cryptocurrency was involved, revoke any token approvals granted to the site and consider transferring funds to a new wallet. Report the phishing domain to relevant platforms, including Google Safe Browsing, ChainPatrol, or the impersonated brand’s security team, to aid in takedown efforts and prevent further victimization.