degen[.]beefyapp[.]sbs

The domain degen.beefyapp.sbs is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google login page to deceive users into entering sensitive credentials. No crypto drainer kit was identified. The site is currently taken offline, but it previously posed an elevated risk due to its deceptive nature and active impersonation of a major brand.

Technical indicators confirm the malicious intent of degen.beefyapp.sbs. The domain was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, SOCRadar, and Webroot. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through Dynadot LLC on October 02, 2025, the domain resolves to the IPv6 address 2a00:1450:4001:80f::2004, hosted on Google LLC infrastructure (AS15169). No SSL certificate was issued, and the observed page title was 'Google'. Nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Users who interacted with degen.beefyapp.sbs should immediately change any passwords entered on the site, particularly for Google accounts. Enable two-factor authentication (2FA) on all critical services to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google Safe Browsing, the registrar (Dynadot LLC), and relevant security platforms like PhishTank or OpenPhish to aid in takedown efforts.