w[.]beefyhubs[.]lat

The domain w.beefyhubs.lat is a confirmed phishing site engaged in brand impersonation targeting Google. It presents a fraudulent login page designed to harvest user credentials by mimicking the Google brand, a tactic known as Google phishing. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate risk, but prior visitors may still face account compromise.

Technical indicators show w.beefyhubs.lat was registered through Dynadot LLC on 2025-10-21 14:25:19 and resolves to the IP address 142.250.181.228, hosted on Google LLC's infrastructure (AS15169). Security vendor detections on VirusTotal are minimal, with 2 of 95 vendors flagging the domain, including ChainPatrol and SOCRadar. The domain appears on 1 security blocklist (PhishDestroy) and lacks an SSL certificate. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and the observed page title was 'Google'. Google Safe Browsing has not flagged the domain.

Users who interacted with w.beefyhubs.lat should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or fraudulent transactions. Report the phishing domain to Google via their phishing reporting tool and to anti-phishing organizations like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.