omni[.]beefyapps[.]lol

The domain omni.beefyapps.lol is a phishing site engaged in brand impersonation, specifically targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. No crypto drainer kit was detected. The site is currently taken offline, but prior activity indicates it was actively used for malicious purposes.

Technical indicators confirm the domain's suspicious nature. omni.beefyapps.lol was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through Dynadot LLC on October 24, 2025, and resolved to the IP address 172.253.62.147, hosted on Google LLC's infrastructure (AS15169). No SSL certificate was issued, and the observed page title was 'Google'. Nameservers were brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Google Safe Browsing did not flag the domain at the time of analysis.

Users who may have interacted with omni.beefyapps.lol should take immediate safety steps. Change any passwords entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized activity or fraud. Report the domain to Google's Safe Browsing team, the registrar (Dynadot LLC), and relevant anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG). If financial or crypto accounts were accessed, revoke token approvals and consider moving funds to a new wallet.