bluefin[.]beefyapp[.]sbs

This domain, bluefin.beefyapp.sbs, is identified as a brand impersonation threat specifically targeting Google. The page title displayed was Google, indicating an attempt to deceive users into believing they were interacting with a legitimate Google service. No cryptocurrency drainer kit was identified during analysis, but the impersonation of a major brand like Google suggests a credential theft or phishing operation aimed at harvesting user login details.

Technical indicators for bluefin.beefyapp.sbs are consistent with malicious infrastructure. VirusTotal reports 4 out of 95 security vendors flagging this domain as malicious. The domain was registered through Dynadot LLC and created on October 2, 2025. It resolves to IP address 142.250.176.196. Gridinsoft trust score is 0 out of 100, and it appears on 1 security blocklist. Google Safe Browsing (GSB) status is not explicitly provided but the domain's presence on blocklists indicates it was likely flagged.

The current status is offline, as the domain has been taken down following detection and blocking by PhishDestroy. Despite being offline, the risk remains elevated due to the potential for similar domains to be registered under the same pattern or for users who visited the site before takedown to have been compromised. Users are advised to avoid accessing any domains with this naming pattern, ensure their Google accounts have two-factor authentication enabled, and monitor for any unauthorized access attempts. If credentials were entered, they should be changed immediately and reported to Google's security team.