app[.]biomatrix[.]ai

The domain app.biomatrix.ai was identified as a phishing site engaged in brand impersonation, specifically targeting Google. This scam operated under the guise of tech support, misleading users into believing they were interacting with a legitimate Google service. As of the latest verification, app.biomatrix.ai has been taken offline, though it previously posed an elevated risk due to its deceptive practices.

Technical analysis of app.biomatrix.ai revealed limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain. The site was registered through GoDaddy.com, LLC on March 22, 2024, and resolved to the IP address 104.21.66.218, hosted by Cloudflare, Inc. in the US. It appeared on a single security blocklist, PhishDestroy, and lacked an SSL certificate issuer. The observed page title was 'Biomatrix,' and the site utilized technologies such as Google Tag Manager, Google Analytics, Cloudflare Browser Insights, and HTTP/3. Nameservers were chad.ns.cloudflare.com and zita.ns.cloudflare.com.

Users who may have interacted with app.biomatrix.ai should take immediate steps to secure their accounts. Since this was a credential phishing attempt, affected individuals should change their Google passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. Reporting the domain to Google’s phishing reporting tools or platforms like Google Safe Browsing can help prevent further abuse. Additionally, victims can submit the domain to security vendors or blocklists for further investigation.