send[.]beefyapp[.]info

The domain send.beefyapp.info is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google service to deceive users into disclosing sensitive information, such as login credentials. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, but prior exposure may still pose a threat to affected users.

Technical indicators confirm send.beefyapp.info as malicious. VirusTotal reports 2 of 95 security vendors flagging the domain, including ChainPatrol and SOCRadar. The domain appears on 1 security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. It is registered through Cloudflare, Inc., resolves to the IP address 142.250.185.100 (located in the US under AS15169 Google LLC), and lacks an SSL certificate. The observed page title was 'Google', reinforcing its impersonation of the brand. Google Safe Browsing has not flagged the domain.

Users who interacted with send.beefyapp.info should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s Safe Browsing team via their reporting tool and to the registrar, Cloudflare, to aid in takedown efforts. If financial or crypto-related credentials were exposed, contact the relevant service providers to secure accounts and review recent transactions for fraud.