op[.]beefyhubs[.]lat

The domain op.beefyhubs.lat is a confirmed phishing site engaged in brand impersonation targeting Google. It presents itself as a legitimate Google login page to deceive users into entering credentials, posing an elevated risk of account compromise. As of the latest verification, op.beefyhubs.lat has been taken offline, though prior activity classified it as a credential-harvesting scam with no associated crypto drainer kit.

Technical analysis of op.beefyhubs.lat reveals limited detection, with 2 of 95 VirusTotal security vendors flagging the domain, including ChainPatrol and SOCRadar. The domain was registered through Dynadot LLC on October 21, 2025, and resolved to the IP address 142.250.80.4, hosted on Google LLC's infrastructure (AS15169). It appears on one security blocklist, PhishDestroy, and lacks an SSL certificate, as indicated by the absence of an issuer. The observed page title was 'Google,' reinforcing its impersonation of the legitimate brand. Nameservers for the domain are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and Gridinsoft assigned it a trust score of 0/100.

Users who interacted with op.beefyhubs.lat should immediately change their Google account passwords and enable two-factor authentication to prevent unauthorized access. Monitor account activity for signs of fraud, such as unfamiliar logins or transactions. Report the phishing domain to Google’s abuse team via their reporting page and submit it to additional blocklists like PhishTank or OpenPhish to aid in broader mitigation efforts.