s[.]beefyapps[.]lol

The domain s.beefyapps.lol is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google service but is designed to deceive users into disclosing sensitive information. No crypto drainer kit was identified in this campaign. As of the latest verification, s.beefyapps.lol has been taken offline.

Technical indicators confirm the malicious nature of s.beefyapps.lol. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through Dynadot LLC on October 24, 2025, it resolves to the IP address 142.250.64.100, hosted on Google LLC's infrastructure (AS15169). The domain lacks an SSL certificate, and its nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The observed page title was 'Google', reinforcing its impersonation of the brand. Gridinsoft assigned a trust score of 0/100 to s.beefyapps.lol.

Users who interacted with s.beefyapps.lol should immediately change any credentials entered on the site, particularly Google account passwords. Enable two-factor authentication (2FA) for all associated accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the domain to Google's phishing reporting tool and to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.