stellar[.]beefyapp[.]biz

stellar.beefyapp.biz is a phishing domain that impersonates Google, posing a brand impersonation threat to users who may believe they are interacting with a legitimate Google service. The site, which is now taken offline, was designed to deceive visitors into providing sensitive information, though no drainer kit was identified. The current status of stellar.beefyapp.biz is offline, indicating it is no longer actively serving malicious content, but users should remain cautious about any past interaction with this domain.

Technical indicators for stellar.beefyapp.biz include detection by 5 of 95 VirusTotal vendors, including ChainPatrol, CyRadar, and Fortinet, while Google Safe Browsing did not flag the domain. The domain was registered through Dynadot LLC on October 5, 2025, and resolves to IP address 172.217.18.4, which is located in the US and associated with AS15169 Google LLC. It appears on 1 security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. No SSL certificate was issued for the domain, and the page title observed was 'Google'. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

To stay safe, if you entered any credentials or personal information on stellar.beefyapp.biz, immediately change those passwords on the legitimate Google website and enable two-factor authentication on your accounts. Monitor your accounts for any unauthorized activity and report the phishing attempt to Google's Safe Browsing team or the Anti-Phishing Working Group at reportphishing@apwg.org. Since no drainer kit was present, no token revocation is needed, but remain vigilant against similar brand impersonation scams.