flx[.]beefy-hub[.]lol

This domain, flx.beefy-hub.lol, poses a high risk as a brand impersonation threat specifically targeting Gmail users. The site was designed to steal login credentials by mimicking the Google login page, a classic credential theft tactic. Its SSL certificate absence and phishing flags from Google Safe Browsing confirm its malicious intent.

Technical indicators paint a clear picture of deception. VirusTotal flags it with 10 out of 95 security vendors marking it as malicious. The domain was registered on October 25, 2025, through Dynadot LLC, a registrar sometimes abused for quick takedowns. It resolves to IP 142.250.185.100, which is notable because that IP is owned by Google—a clever but transparent attempt to appear legitimate. The site is currently offline, but its appearance on one security blocklist indicates it was actively monitored. The page title was "Google," furthering the impersonation.

Users should avoid any interaction with this domain. Never enter Gmail credentials on unverified pages, especially those lacking HTTPS. Enable two-factor authentication on your Google account and use a password manager to detect lookalike URLs. If you already entered credentials, change your password immediately and review recent account activity for unauthorized access. Report such domains to Google Safe Browsing and your email provider to help protect others.