scr[.]beefyhub[.]lat

The domain scr.beefyhub.lat was registered on October 21, 2025 through Dynadot LLC and resolves to the IPv4 address 142.251.16.104, which belongs to AS15169 owned by Google LLC and is located in the United States. The domain is currently offline, and no TLS certificate is presented for the host, indicating that the site does not serve encrypted traffic. Public intelligence shows the page title returned as "Google" and the scam classification is recorded as a Brand Impersonation targeting Google. Six of ninety‑five antivirus and URL scanning engines on VirusTotal flagged the domain, suggesting a moderate level of suspicion among security vendors.

The Gridinsoft trust score is 0 out of 100, reinforcing the low confidence in the domain’s legitimacy. Infrastructure analysis reveals the domain is delegated to Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, a common choice for fast‑flux and phishing infrastructures. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, confirming that at least one dedicated anti‑phishing service has taken mitigation action. While the available data confirms the domain’s impersonation intent and its association with Google’s IP space, the offline status prevents direct observation of the content, login forms, or any additional payload.

Consequently, the precise phishing kit or credential‑harvesting method remains unknown. Defenders should add scr.beefyhub.lat to URL filtering and DNS blocklists, monitor for any re‑activation of the host, and consider extending surveillance to other subdomains under the same registrar and nameserver configuration. Continuous re‑scanning with multi‑vendor services is advised to capture any future changes in detection status.