stellar[.]beefyhubs[.]monster

The domain stellar.beefyhubs.monster was registered on October 26, 2025 through Dynadot LLC and is currently taken offline. Infrastructure analysis shows it resolves to IP address 216.58.206.68, which is owned by Google LLC (AS15169) and located in Germany. The domain uses Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, but it does not present an SSL certificate, leaving the connection unencrypted. The page title returned by the site is "Google," matching the declared impersonated brand.

A Gridinsoft trust score of 0 out of 100 indicates an extremely low reputation. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy. VirusTotal scans recorded 11 detections out of 95 security vendors, confirming that multiple scanners flag the domain as malicious. The scam type is identified as brand impersonation, specifically targeting Google.

Uncertainties remain regarding the exact payload or credential harvesting mechanisms, as no content analysis or HTTP response details are available. Defenders should immediately add stellar.beefyhubs.monster to domain blocklists, enforce DNS filtering, and monitor outbound connections to its IP for any anomalous activity. Because the IP belongs to a legitimate Google infrastructure, traffic to it may otherwise appear benign; therefore, correlation with the domain name is essential. Continuous monitoring of the associated Cloudflare name servers for future re‑registration or related sub‑domains is advised, and security teams should verify that endpoint protection solutions flag any attempts to access this domain.