# cetus.beefyhubs.click — SUSPICIOUS

> Discover why cetus.beefyhubs.click is flagged for phishing. Medium risk domain taken offline after appearing on multiple blocklists with Google spoofing.

## Summary
PhishDestroy identifies cetus.beefyhubs.click as a medium-risk generic phishing threat, impersonating Google to lure victims. This domain was created on October 22, 2025, and resolved to IP 172.253.62.99. It appears on three security blocklists and was flagged by 3 of 95 vendors on VirusTotal, supporting its malicious intent.

The domain was registered through Dynadot LLC and used a deceptive page title "Google" to trick users. Its infrastructure and multiple blocklist appearances indicate confirmed phishing activity aimed at credential theft or fraud.

Currently, cetus.beefyhubs.click is offline, reducing immediate risk. Users and organizations should remain alert to similar domains and employ URL filtering and anti-phishing measures to mitigate ongoing threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Google

## Domain Intelligence
- Registered: 2025-10-22 12:03:59
- Expires: 2026-10-22 12:03:59
- Registrar: Dynadot LLC
- Country: US
- IP: 172.253.62.99
- IP Org: Cloudflare CDN
- Nameservers: brenna.ns.cloudflare.com hassan.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a5ec4-66f4-71ad-af15-352cf932e6eb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7f3485a7-318a-4126-98ac-d202904205b0
- PhishDestroy: https://phishdestroy.io/domain/cetus.beefyhubs.click/
- LLM endpoint: https://phishdestroy.io/domain/cetus.beefyhubs.click/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cetus.beefyhubs.click/
Last updated: 2026-03-19