insightsdiscoverabilityguidelines[.]xyz

This domain is flagged as a credential harvesting phishing site with an elevated risk level. Analysis indicates it was specifically designed to impersonate authentication portals, likely targeting users through deceptive Account Center login pages to capture usernames, passwords, and other sensitive credentials. Infrastructure analysis reveals the domain was registered on March 14, 2026, and resolves to IP address 38.97.40.99, hosted on AS174 (Cogent Communications, LLC) in the United States. The SSL certificate is identified as R12, a common indicator of low-trust or automated certificate issuance. The domain appears on one security blocklist and is flagged by 24 out of 95 security vendors on VirusTotal, with detections including phishing, fraudulent site, and credential theft classifications. The page title Account Center strongly suggests an attempt to mimic legitimate account management portals. Organizations and users should immediately block this domain at the network level and add it to endpoint protection deny lists. Security teams should review logs for connections to 38.97.40.99 or any subdomains of insightsdiscoverabilityguidelines.xyz, particularly those associated with authentication attempts. If credentials were entered on this site, affected accounts should be locked, passwords reset, and multi-factor authentication enforced. Domain registrars and hosting providers should be notified to facilitate takedown of related infrastructure. Proactive monitoring for similar domains using the same registrar, IP range, or certificate authority is recommended to detect follow-up campaigns.