doubleinvestoptions[.]com

doubleinvestoptions.com is a phishing domain engaged in brand impersonation targeting the brand across. The site was used in a cryptocurrency scam and has been taken offline. There is no evidence of a drainer kit associated with this domain, but the impersonation threat suggests users should be cautious and consider it unsafe for any transactions or data entry.

doubleinvestoptions.com was registered on May 22, 2025, through GMO Internet, Inc. It resolves to the IP address 198.12.66.123 located in the US (AS36352 HostPapa). The domain appears on 1 security blocklist, specifically PhishDestroy, and holds an SSL certificate issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2. VirusTotal scans show 0 of 95 vendors flagging this domain, and Google Safe Browsing does not currently list it as flagged. The site employed technologies including Nginx and OpenResty and used nameservers ns1.host-forest.com and ns2.host-forest.com.

Users who may have interacted with doubleinvestoptions.com should take precautionary measures. Given the phishing and brand impersonation nature of this scam, it is advisable to change any passwords that may have been entered and enable two-factor authentication on relevant accounts. Users should monitor financial and online accounts for suspicious activity. Suspected phishing attempts involving doubleinvestoptions.com can be reported to security blocklists like PhishDestroy and to relevant cybersecurity authorities to help prevent further victimization.