wlfi[.]beefyhubs[.]lol

The domain wlfi.beefyhubs.lol was registered through Dynadot LLC on October 21, 2025 and is currently listed as offline. Infrastructure analysis shows that the domain resolves to IP address 216.58.212.132, which is owned by Google LLC (ASN 15169) and located in the United States. The authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s DNS service. No TLS certificate was observed for the domain, meaning HTTPS connections would be unavailable or would fall back to plain HTTP.

The page title returned by the HTTP response is "Google", matching the declared brand target and confirming a brand‑impersonation intent. Gridinsoft assigned a trust score of 0 out of 100, and the domain was flagged by PhishDestroy as a malicious site. VirusTotal scans reported that seven out of ninety‑five security vendors flagged the domain, and it appears on a single external blocklist. The low trust score, presence on a blocklist, and partial detection by multiple vendors collectively raise the risk profile despite the domain being taken offline.

Uncertainty remains regarding the specific phishing kit or payload that may have been served while the site was active, as no payload analysis or HTTP content details are available. Defenders should continue to block the domain at network perimeter devices, update URL filtering policies, and monitor for any future re‑registration attempts. Additional investigation of historic HTTP archives, if any, could provide insight into the exact content used for brand impersonation.