strk[.]beefyapp[.]sbs

The domain strk.beefyapp.sbs is a phishing site engaged in brand impersonation, specifically targeting Google. It presents itself as a legitimate Google service to deceive users into disclosing credentials or other sensitive information. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk, but prior exposure may still pose a threat to users who interacted with it.

Technical indicators confirm the malicious nature of strk.beefyapp.sbs. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, SOCRadar, and Webroot. It appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. Registered through Dynadot LLC on October 02, 2025, the domain resolves to the IP address 142.250.184.196, hosted on Google LLC's infrastructure (AS15169) in the US. The site used Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and had no SSL certificate. The observed page title was 'Google'.

Users who visited strk.beefyapp.sbs should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or personal data was exposed, consider contacting relevant institutions for further guidance.