bnc[.]beefyapp[.]sbs

This domain, bnc.beefyapp.sbs, is identified as a brand impersonation threat targeting Google users. The site presents a fake Google login interface designed to harvest user credentials, including usernames, passwords, and potentially multi-factor authentication codes. Such impersonation attacks are commonly used to gain unauthorized access to accounts, leading to data breaches, financial fraud, or further phishing campaigns targeting contacts within compromised accounts. Analysis indicates the domain was registered on October 2, 2025, through Dynadot LLC, a registrar frequently used for short-lived malicious domains. Security vendors on VirusTotal flagged this domain with 5 detections out of 95, signaling moderate confidence in its malicious nature. The site resolves to the IP address 142.250.184.228, which is associated with legitimate Google infrastructure, suggesting an attempt to blend in with trusted traffic or exploit misconfigured security filters. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, reinforcing its high-risk classification. If you visited bnc.beefyapp.sbs or entered any credentials, take immediate action. First, change the passwords for any accounts accessed through the site, prioritizing email and financial services. Enable multi-factor authentication if not already active. Monitor accounts for unauthorized activity, such as unfamiliar logins or transactions. Run a full scan of your device using updated security software to detect potential malware. Report the incident to your organization’s IT security team if the device is work-related. Avoid reusing passwords across multiple platforms to limit the impact of credential theft.