bullzilla[.]xyz

The domain bullzilla.xyz was a generic phishing site designed to deceive users into disclosing sensitive information through fraudulent login or credential-harvesting pages. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, bullzilla.xyz has been taken offline, though its prior activity poses residual risk to users who may have interacted with it.

Technical indicators confirm bullzilla.xyz as a low-reputation domain. VirusTotal recorded detections from 2 of 95 security vendors, including Gridinsoft and Trustwave, while Gridinsoft assigned it a trust score of 0/100. The domain was registered on 2025-09-10 08:41:18 via OwnRegistrar, Inc., and resolved to the IP address 104.21.27.180, hosted on Cloudflare's network (AS13335). It appeared on one security blocklist, PhishDestroy, and had no SSL certificate, as reflected by the observed page title 'Just a moment...'. No flags were raised by Google Safe Browsing at the time of assessment.

Users who visited bullzilla.xyz should assume their credentials may have been compromised. Immediately change passwords for any accounts accessed during or after the visit, prioritizing email, financial, and social media platforms. Enable multi-factor authentication (MFA) on all critical services to mitigate unauthorized access. Monitor accounts for unusual activity, such as unauthorized logins or transactions. Report the domain to relevant authorities, including local cybercrime units, the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org, and the domain registrar (OwnRegistrar, Inc.) to support takedown efforts.