# chibibeast.lat — SUSPICIOUS

> PhishDestroy warns: chibibeast.lat is a crypto drainer impersonating Chibi Beast with 0/95 VirusTotal detections. Verify before clicking!

## Summary
Domain chibibeast.lat has been flagged for hosting a generic crypto drainer kit designed to empty cryptocurrency wallets, specifically targeting users under the guise of Chibi Beast branding. The threat type is confirmed as a generic phishing operation with active status, actively resolving to malicious payloads. Security research indicates this domain is part of a broader campaign targeting crypto enthusiasts through impersonation tactics. Current analysis confirms the drainer kit mimics legitimate Chibi Beast services to trick victims into connecting fraudulent wallets, allowing attackers to drain funds upon authorization.  

This domain exhibits multiple red flags uncovered during forensic analysis. It utilizes a Let's Encrypt SSL certificate, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP address 104.21.23.61. VirusTotal currently shows 0 detections out of 95 engines as of this report, while the domain was created on March 23, 2026. Google Safe Browsing (GSB) status remains unflagged, and the domain has not yet been added to major blocklists such as PhishTank or OpenPhish, indicating it is still in early distribution phases.  

The investigation into chibibeast.lat remains active and under continuous monitoring by fraud detection specialists. While VirusTotal and GSB have not yet flagged the domain, proactive blocking is recommended due to the crypto drainer threat pattern. Users are advised to avoid interacting with chibibeast.lat and verify domain authenticity using PhishDestroy's verification tools. If this domain appears in any crypto-related communications, treat it as high-risk due to the active drainer kit operation and lack of current detection coverage.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-23 09:20:13
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.23.61

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f447a0ec-fa18-43b2-9563-9ca18c829d53
- PhishDestroy: https://phishdestroy.io/domain/chibibeast.lat/
- LLM endpoint: https://phishdestroy.io/domain/chibibeast.lat/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chibibeast.lat/
Last updated: 2026-03-23