modelbuilder[.]xyz

This domain is flagged as a credential theft phishing site, impersonating the Odoo platform. The site poses a significant risk to users who may inadvertently enter their login credentials, leading to unauthorized access and potential data breaches. The threat level is elevated, and the domain is currently offline.

Analysis indicates that the domain modelbuilder.xyz was created on June 12, 2026, and is registered through NAMECHEAP INC. It appears on one security blocklist and has a Gridinsoft trust score of 0/100, indicating a complete lack of trust. The domain has been mentioned in 6 threat intelligence pulses on AlienVault OTX. VirusTotal reports that 12 out of 95 security vendors flag this domain as malicious. The site resolves to the IP address 104.21.52.32 and was previously protected by an SSL certificate issued by Google Trust Services.

If a user has visited modelbuilder.xyz, it is imperative to change passwords for any Odoo accounts and any other accounts using the same credentials. Additionally, users should monitor their account activity for any unauthorized transactions or changes. Enabling two-factor authentication (2FA) can provide an additional layer of security. Users are advised to report the incident to their IT security team and to the Odoo support team if necessary.