polkadot[.]beefyhubs[.]lat

The domain polkadot.beefyhubs.lat is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google page to deceive users into disclosing credentials or other sensitive information. No crypto drainer kit was identified in this campaign. The site is currently taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical analysis shows that polkadot.beefyhubs.lat was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar. It appears on 1 security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. The domain was registered through Dynadot LLC on October 21, 2025, and resolves to the IP address 142.250.186.164, located in the US under AS15169 (Google LLC). No SSL certificate was observed, and the page title displayed was 'Google'. Nameservers for the domain are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who visited polkadot.beefyhubs.lat should immediately change any passwords entered on the site and enable two-factor authentication on their Google account. Monitor account activity for unauthorized access or fraudulent transactions. Report the phishing domain to Google’s Safe Browsing team, the registrar (Dynadot LLC), and relevant security platforms like PhishTank or OpenPhish to aid in takedown efforts.