proposals-kledai[.]com

The domain proposals-kledai.com was registered on May 11 2026 through a public registrar. DNS resolution points to IP 104.21.47.234, which belongs to a large content‑delivery network hosting provider. HTTP requests return status 200 and the site presents a TLS certificate issued by a publicly trusted certificate authority, indicating normal web service availability.

Threat intelligence sources have associated the domain with generic phishing activity. An AlienVault OTX pulse references the domain, and it appears on three independent security blocklists. Four of ninety‑five scanning engines on a multi‑engine analysis platform flagged the domain as malicious. A security rating system assigned a trust score of 0 out of 100. The page title returned by the web server is “FASTPANEL”, a common default panel title that is often abused to host credential‑harvesting pages.

Current analysis cannot confirm the exact payload or target brand, as no public phishing page samples have been released. The lack of disclosed content leaves the specific lure unknown, but the combination of blocklist listings, low trust score, and multiple scanner detections indicates a high likelihood that the site is being used to collect credentials. The domain remains active as of the report date.

Defenders should treat proposals-kledai.com as a high‑risk indicator. Immediate actions include adding the domain to network deny lists, configuring DNS sinkhole or firewall rules to block outbound connections, and monitoring for related URL patterns in email gateways. Incident response teams should also alert end users about potential credential‑phishing attempts originating from this domain and consider evidence‑based hunting for any compromised accounts.