usual[.]beefyapp[.]info

usual.beefyapp.info is a phishing domain engaged in brand impersonation, specifically targeting Google. The domain posed as a legitimate Google page to deceive users into providing sensitive information, such as login credentials. The site has been taken offline, but it posed an elevated risk due to its impersonation of a trusted brand. No crypto drainer kit was associated with this threat, indicating a focus on credential theft rather than cryptocurrency theft.

Technical indicators for usual.beefyapp.info include detection by 2 of 95 VirusTotal vendors, including ChainPatrol and SOCRadar. The domain is registered through Cloudflare, Inc. and resolves to IP address 216.58.206.68, which is located in Germany (DE) and belongs to AS15169 Google LLC. It appears on 1 security blocklist, specifically PhishDestroy. The page title observed was 'Google', and the Gridinsoft trust score is 0/100. The domain has no SSL certificate, and its nameservers are listed as NS_NOT_FOUND. Google Safe Browsing did not flag the domain.

To protect against threats from usual.beefyapp.info, users who may have interacted with the site should immediately change any passwords entered on the page and enable two-factor authentication (2FA) on their Google accounts. Monitor accounts for unauthorized activity, such as unexpected login attempts or changes to account settings. Report the domain to Google Safe Browsing and other security platforms to help block similar threats. If any financial information was shared, contact your bank or credit card provider. No crypto drainer was present, so no token revocation is needed.