dolomite[.]beefy-hub[.]sbs

This domain, dolomite.beefy-hub.sbs, poses a credential harvesting threat by impersonating Gmail login interfaces. Attackers use such sites to deceive users into entering their email credentials, which are then captured for unauthorized access to accounts, data exfiltration, or further phishing campaigns. The site mimics legitimate Google branding, including the page title 'Google,' to increase the likelihood of successful deception. Analysis indicates the domain was registered on October 25, 2025, through Dynadot LLC, a registrar frequently used for short-lived malicious domains. It resolves to the IP address 142.250.185.164, which belongs to Google LLC (AS15169), suggesting potential abuse of cloud infrastructure or IP spoofing to appear legitimate. The domain is flagged by 9 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly marking it as phishing. Additionally, it appears on one security blocklist and lacks an SSL certificate, a common red flag for fraudulent sites. Users who visited dolomite.beefy-hub.sbs should assume their credentials may have been compromised. Immediately change the password for the affected Gmail account and enable multi-factor authentication if not already active. Review account activity for unauthorized logins or sent messages, and revoke access for any unfamiliar connected applications. Monitor linked accounts for suspicious activity, as attackers may attempt to pivot using the stolen credentials. Report the incident to the email provider and consider notifying contacts who may have received phishing messages from the compromised account.