bnc[.]beefyapps[.]lat

The domain bnc.beefyapps.lat was registered on October 24, 2025 through Dynadot LLC and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 142.250.184.228, which belongs to AS15169 Google LLC and is geolocated in the United States. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating the use of Cloudflare DNS services. No SSL certificate was observed for the host, meaning the site would have been served over plain HTTP if active.

The page title returned by the server was "Google," matching the declared brand target of Google. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scanned the domain and eight of ninety‑five security vendors reported it as malicious, providing additional confirmation of its threat profile.

Defenders should continue to enforce DNS‑level deny rules for bnc.beefyapps.lat, incorporate the domain into existing URL filtering and web gateway policies, and monitor the associated IP address for any re‑use or changes in hosting. Given the use of reputable DNS infrastructure and a Google‑owned IP range, future malicious actors may attempt to replicate this pattern; therefore, security teams should also watch for newly registered domains with similar naming schemes or Cloudflare nameservers that resolve to Google‑owned IP blocks. Regular re‑evaluation of blocklist entries and threat‑intel feeds is advised to capture any resurgence of activity associated with this indicator.