proposalforge[.]in

PhishDestroy identifies the active phishing domain proposalforge.in, currently impersonating a generic proposals service to deceive users seeking professional document templates.

This domain was flagged by 1 out of 95 VirusTotal vendors, raising concerns about its recent deployment and low detection coverage. Registered through GoDaddy, proposalforge.in resolves to IP address 216.198.79.1 and was created on May 08, 2026, indicating a recently established infrastructure. The domain utilizes a valid Let's Encrypt SSL certificate, enhancing its appearance of legitimacy. As of the latest assessment, no known blocklists have flagged this domain, and current trust scores remain unvalidated.

Currently under investigation, proposalforge.in poses an evolving threat due to its low detection rate and active status. Users are advised to avoid interacting with this domain and report any suspicious communications linked to it. Organizations should monitor network traffic for connections to 216.198.79.1 and update blocklists to include this domain once confirmed malicious. Immediate action includes verifying the authenticity of any proposals service websites and ensuring employees are informed of this emerging threat.