fil[.]beefyapps[.]lat

The domain fil.beefyapps.lat is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as an official Google page to deceive users into disclosing login credentials or other sensitive information. No crypto drainer kit was identified in this campaign. As of the latest verification, fil.beefyapps.lat has been taken offline.

Technical indicators confirm the malicious nature of fil.beefyapps.lat. The domain was registered through Dynadot LLC on October 24, 2025, and resolves to the IP address 142.251.16.105, hosted on Google LLC's infrastructure (AS15169). Security vendors on VirusTotal flagged the domain, with 5 of 95 vendors detecting it as malicious, including ChainPatrol, alphaMountain.ai, and CRDF. It appears on one security blocklist (PhishDestroy) and lacks an SSL certificate. The observed page title was 'Google', reinforcing its impersonation of the legitimate brand. Gridinsoft assigned a trust score of 0 out of 100, further indicating its fraudulent intent.

Users who interacted with fil.beefyapps.lat should immediately change any passwords entered on the site, particularly for Google accounts. Enable two-factor authentication (2FA) to add an extra layer of security and monitor accounts for unauthorized activity. Report the phishing domain to Google’s abuse team via their reporting tool and to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to assist in broader takedown efforts.