threshold[.]beefyapp[.]cfd

The domain threshold.beefyapp.cfd is a confirmed phishing site engaged in brand impersonation, specifically targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. As of the latest verification, threshold.beefyapp.cfd has been taken offline and no longer resolves.

Technical analysis reveals that threshold.beefyapp.cfd was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar. The domain was registered through Dynadot LLC on October 02, 2025, and resolved to the IP address 142.250.185.228, hosted on Google LLC's infrastructure (AS15169). It appeared on one security blocklist, PhishDestroy, and did not possess an SSL certificate. The observed page title was 'Google', and the nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com.

Users who may have interacted with threshold.beefyapp.cfd should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unfamiliar logins or transactions. Report the phishing domain to Google’s abuse team via their reporting page and to additional threat intelligence platforms like PhishTank or OpenPhish to aid in broader mitigation efforts.