zeebu[.]beefyapps[.]sbs

Analysis on 25 July 2026 indicates that the domain zeebu.beefyapps.sbs was created on 24 October 2025 and is currently taken offline. The domain resolves to the IP address 172.67.145.247, which is owned by Cloudflare, Inc. (AS13335) and is geolocated in the United States. Registration was performed through Dynadot LLC and the authoritative nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. No SSL certificate is presented for the host, and the page title returned when the site was reachable reads “Access denied | zeebu.beefyapps.sbs used Cloudflare to restrict access | zeebu.b”, suggesting that Cloudflare is actively blocking traffic to the site. Reputation data show a Gridinsoft trust score of 0 out of 100, indicating a lack of confidence in the domain’s legitimacy.

Seven of ninety‑five security vendors on VirusTotal flagged the domain, and it appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. The combination of a low trust score, multiple vendor detections, and blocklist presence aligns with the classification of a generic phishing threat. Uncertainty remains regarding the specific phishing payload or target brand because no content analysis of the landing page is available.

The absence of an SSL certificate further hampers secure communication and may be indicative of a hastily provisioned malicious infrastructure. Defenders should continue to block traffic to 172.67.145.247 and add zeebu.beefyapps.sbs to local deny lists. Monitoring of Cloudflare‑associated IP ranges for similar patterns is advised, as is periodic re‑query of VirusTotal and other reputation services for any changes in detection status. Because the domain is currently offline, any active exploitation is unlikely, but the infrastructure could be repurposed for future campaigns.