bluefin[.]beefyhub[.]lol

This domain, bluefin.beefyhub.lol, has been assessed at an elevated risk level due to a specific brand impersonation threat targeting Google. The domain was designed to deceive users by mimicking the Google login page, as indicated by its page title 'Google'. Although the domain is currently offline, its prior activity posed a significant risk to unsuspecting visitors.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 3 out of 95 security vendors marking it as malicious. It was registered through Dynadot LLC on October 21, 2025, and resolves to IP address 142.250.186.164. The domain lacks an SSL certificate, increasing the risk of data interception. It appears on one security blocklist, and its unique seed, 0ca119, ties it to a broader phishing campaign. The domain's creation date is notably recent, suggesting a short-lived but targeted attack.

For users who may have encountered this domain, immediate action is recommended. Since it impersonates Google, do not enter any credentials or personal information. If you did, change your Google account password immediately and enable two-factor authentication. Report the domain to Google's Safe Browsing team and monitor your account for suspicious activity. Running a full antivirus scan on your device is also advised to check for any malware that may have been delivered through the phishing page.