omni[.]beefyapp[.]sbs

This domain, omni.beefyapp.sbs, is flagged for brand impersonation targeting Google, a high-value credential theft vector. Analysis indicates the site mimics Google's login interface to harvest user credentials, session tokens, and multifactor authentication codes. The threat is classified as elevated due to the domain's convincing replication of Google's branding, including an identical page title, and its use of a recently registered infrastructure to evade detection filters. Infrastructure analysis reveals the domain was registered on October 2, 2025, through Dynadot LLC, a registrar frequently exploited for short-lived phishing campaigns. VirusTotal detections show 5 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and resolves to the IP address 142.250.184.228, which is geolocated to a network segment commonly abused for transient phishing operations. The combination of a recent registration date, low detection count, and use of a legitimate-looking IP address suggests an attempt to blend into normal traffic patterns. Users who visited omni.beefyapp.sbs should immediately invalidate any credentials entered on the site, including passwords and authentication tokens. Reset passwords for Google accounts and any other services where identical credentials may have been reused. Enable multifactor authentication if not already active, and monitor account activity for unauthorized access attempts. If financial or sensitive data was submitted, initiate a credit freeze and report the incident to relevant data protection authorities. Network administrators should block the domain and its resolving IP at the perimeter to prevent further exposure.