polkadot[.]beefyhub[.]lol

The domain polkadot.beefyhub.lol is a confirmed phishing site engaged in brand impersonation, specifically targeting Google. It presents a fraudulent login page designed to harvest user credentials, posing as the legitimate Google brand. No crypto drainer kit was identified in this campaign. The site is currently taken offline, but its prior activity classifies it as an elevated-risk threat for users who may have interacted with it.

Technical analysis reveals that polkadot.beefyhub.lol was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar. It appears on 1 security blocklist, PhishDestroy, and was registered through Dynadot LLC on October 21, 2025. The domain resolved to the IP address 142.250.184.196, hosted under Google LLC’s AS15169 in the US, with Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No SSL certificate was issued, and the observed page title was 'Google'. Gridinsoft assigned a trust score of 0 out of 100.

Users who visited polkadot.beefyhub.lol should immediately change any passwords entered on the site, particularly for Google accounts. Enable two-factor authentication (2FA) on all sensitive accounts to mitigate further risk. Monitor financial and login activity for signs of fraud, such as unauthorized transactions or unexpected password reset emails. Report the domain to Google’s phishing reporting tool at https://safebrowsing.google.com/report_phish/ and to the registrar, Dynadot LLC, via their abuse contact. Additionally, submit the domain to PhishTank or other threat-sharing platforms to assist in broader detection efforts.