sca[.]beefyhubs[.]lat

The domain sca.beefyhubs.lat is a phishing site engaged in brand impersonation targeting Facebook users. It presents itself as a legitimate Facebook login page to deceive victims into entering credentials, posing an elevated risk of account compromise. No crypto drainer kit was identified. The site is currently taken offline, but prior activity indicates it was actively used for credential theft.

Technical analysis of sca.beefyhubs.lat shows 2 of 95 VirusTotal security vendors flagged the domain, including ChainPatrol and SOCRadar. It appears on 1 security blocklist (PhishDestroy) and was registered through Dynadot LLC on October 21, 2025. The domain resolves to IP address 142.250.176.196, hosted on Google LLC infrastructure in the US (AS15169). No SSL certificate was present, and the observed page title was 'Google'. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Individuals who may have interacted with sca.beefyhubs.lat should immediately change their Facebook password and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspicious transactions or logins. Victims are advised to report the phishing domain to their email provider, Facebook’s abuse team, and platforms like Google Safe Browsing or PhishTank to prevent further exploitation.