miamibeauty-salone[.]biz

This domain, miamibeauty-salone.biz, operates as a credential theft platform designed to deceive visitors by impersonating a legitimate beauty salon. Analysis indicates the site presents itself as 'Miami Beauty Salon - Lashes & Luster,' a plausible cover for collecting sensitive user information such as account credentials, personal details, or payment data. The infrastructure is tailored to exploit trust in local service providers, a common tactic in targeted credential harvesting campaigns. Evidence supporting this assessment includes multiple technical indicators. The domain resolves to the IP address 45.14.245.148 and is registered through Global Domain Group LLC, with a creation date of February 21, 2026, suggesting a recently established operation. It appears on one security blocklist and is flagged by 4 out of 95 security vendors on VirusTotal, indicating cross-industry detection of malicious activity. The domain has since been taken offline, though its prior activity remains a concern for potential victims. Users who visited miamibeauty-salone.biz should take immediate action to mitigate risks. Those who entered credentials or personal information should reset passwords for all accounts where the same credentials may have been reused, prioritizing financial and email accounts. Monitor accounts for unauthorized activity and enable multi-factor authentication where available. If payment details were submitted, contact financial institutions to request transaction reviews and potential card replacements. Given the elevated risk level, affected users are advised to conduct a full security review of their devices for any signs of compromise.