metis[.]beefyapp[.]cfd

The domain metis.beefyapp.cfd is a confirmed phishing site engaged in brand impersonation, specifically targeting Google users. It presents itself as a legitimate Google login page to deceive victims into entering credentials, constituting a credential-stealing phishing scam. No crypto drainer kit was identified. The site is currently taken offline, but prior activity posed an elevated risk to users searching for or interacting with Google services.

Technical analysis of metis.beefyapp.cfd reveals limited but notable detection. As of the latest scan, 2 of 95 VirusTotal security vendors flagged the domain, including ChainPatrol and SOCRadar. The domain appears on 1 security blocklist, PhishDestroy. Registered through Dynadot LLC on October 02, 2025, it resolves to the IP address 142.250.185.164, hosted on Google LLC's infrastructure (AS15169) in the US. The site used nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, displayed a page title of 'Google,' and had no SSL certificate issued. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with metis.beefyapp.cfd should immediately change any credentials entered on the site, particularly Google account passwords. Enable two-factor authentication (2FA) on all accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s Safe Browsing team via their reporting tool and to the registrar, Dynadot LLC, to aid in takedown efforts. Victims can also submit the domain to additional blocklists like PhishTank or OpenPhish for broader awareness.