recall[.]beefyapp[.]sbs

The domain recall.beefyapp.sbs was created on October 02, 2025 and is registered through Dynadot LLC. It is configured without an SSL certificate and resolves to the IP address 142.250.185.68, which belongs to AS15169 owned by Google LLC in the United States. The page title returned by the web server is "Google," matching the declared brand target of Google and confirming the domain’s intent to impersonate that brand. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service. It is also flagged by three of ninety‑five security scanners on VirusTotal, indicating that a minority of detection engines have identified malicious characteristics.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low confidence in the domain’s legitimacy. Nameserver records point to brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, both Cloudflare‑managed resolvers, which is a common pattern for fast‑flux or short‑lived phishing infrastructure. The current operational status is offline, limiting real‑time content analysis; no additional page content, redirects, or payloads have been observed. Defenders should treat recall.beefyapp.sbs as a high‑confidence brand‑impersonation indicator.

Recommended actions include adding the domain to DNS‑level blocklists, ensuring URL filtering solutions flag any request to the domain, and monitoring the associated IP address for any future activity. Because the domain uses legitimate Google‑owned IP space, network‑based alerts based solely on IP reputation may be insufficient, so correlation with the specific domain name is essential. Continuous watch‑list updates for any newly registered subdomains under the same registrar or similar naming patterns are advised.