dbr[.]beefyapps[.]cfd

The domain dbr.beefyapps.cfd is a confirmed phishing site engaged in brand impersonation targeting Google. It presented a fraudulent login page designed to harvest user credentials under the guise of the legitimate Google brand. No crypto drainer kit was detected. The site is currently taken offline, but it previously posed an elevated risk due to its deceptive appearance and active credential theft attempts.

Technical analysis of dbr.beefyapps.cfd reveals 5 of 95 VirusTotal security vendors flagged the domain as malicious, including ChainPatrol, CyRadar, and ESET. The domain was registered through Dynadot LLC on October 24, 2025, and resolved to the IP address 142.250.64.100, hosted on Google LLC's infrastructure (AS15169). It appeared on 1 security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was 'Google,' reinforcing its impersonation of the legitimate brand. Nameservers were hosted on Cloudflare (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com).

Users who interacted with dbr.beefyapps.cfd should immediately change any passwords entered on the site, particularly for Google accounts. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand (Google) and relevant authorities. The domain can be reported to Google Safe Browsing, PhishTank, or the registrar (Dynadot LLC) for further investigation and takedown.