proposals-giza[.]xyz

The domain proposals-giza.xyz is a confirmed phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. As of the latest verification, proposals-giza.xyz has been taken offline, though prior activity classified it as a scam.

Technical indicators confirm the malicious nature of proposals-giza.xyz. The domain was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, CyRadar, and Forcepoint ThreatSeeker. It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and was registered through OwnRegistrar, Inc. on October 22, 2025. The domain resolved to the IPv6 address 2a00:1450:4001:80b::200e, hosted under Google LLC’s AS15169 in Germany. No SSL certificate was present, and the observed page title redirected to 'https://giza-net.pages.dev/'. Nameservers were marlowe.ns.cloudflare.com and odin.ns.cloudflare.com, and the site returned an HTTP 429 status code at the time of analysis.

Users who interacted with proposals-giza.xyz should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to Google’s security team. The domain can be reported to Google Safe Browsing, PhishTank, or the registrar, OwnRegistrar, Inc., to aid in takedown efforts. If financial or cryptocurrency transactions were involved, contact relevant institutions to secure accounts and review transaction histories for signs of compromise.