proposal-doublezerc[.]xyz

This domain, proposal-doublezerc.xyz, is flagged as a credential phishing resource targeting users through impersonation of a high-performance network infrastructure brand, specifically referencing 'DoubleZero' in its page title. Analysis indicates the site employs generic phishing tactics to harvest login credentials, financial details, or other sensitive user data. No specific drainer kit signatures were identified in available telemetry, though the domain exhibits characteristics consistent with broad-scale phishing campaigns. Infrastructure analysis reveals the domain was registered on April 23, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 172.67.159.86 and is currently present on 3 security blocklists. VirusTotal detection metrics show 5 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain is blocked by multiple security mechanisms, including MetaMask, PhishDestroy, and SEAL, indicating active mitigation efforts. Detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3, suggesting the use of content delivery networks to obfuscate hosting infrastructure. The domain has been taken offline, reducing immediate exposure risk. However, residual threats persist due to potential credential harvesting from prior interactions. Users who accessed the domain before its deactivation should assume compromise of any submitted data and initiate password resets for associated accounts. Organizations are advised to monitor for indicators of compromise linked to this domain and its resolved IP. Continuous evaluation of related infrastructure is recommended, as threat actors may re-establish operations under new domains or IPs.