threshold[.]beefyapps[.]cfd

threshold.beefyapps.cfd is a subdomain of beefyapps.cfd. PhishDestroy first observed the hostname on Nov 10, 2025. Stored content metadata identifies Google as the apparent target. The captured page title is “Google”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 65/100 (high).

One source contains a positive finding: VirusTotal. VirusTotal recorded 3 detections among 95 engines: ChainPatrol, ESET, SOCRadar on Feb 23, 2026 at 06:38 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:35 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:26 UTC; content was unavailable. Registration records for the registrable domain beefyapps.cfd list Dynadot LLC as the registrar and Oct 23, 2025 as the creation date. Registration preceded first observation by 17 days. At collection time, the hostname resolved to 142.250.186.164 on AS15169 (GOOGLE, US). The IP and ASN identify shared CDN edge infrastructure; the origin server is not established by this address. The stored server header is gws. DOM analysis on Apr 10, 2026 at 23:27 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

Stored content provides classification context, but only one source contains a positive finding.