proposal-15[.]click

The domain proposal-15.click was registered on July 23, 2026 through Namecheap Inc and is presently active. DNS resolution points to the IPv4 address 192.64.119.62, with authoritative name servers dns1.registrar-servers.com and dns2.registrar-servers.com. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, indicating that at least one threat intelligence feed has classified the host as malicious.

A VirusTotal scan involving 91 commercial and open‑source antivirus engines returned no detections, but the absence of signatures does not constitute a safety guarantee and should be interpreted as a lack of known payloads at the time of analysis. No public SSL certificate details, HTTP response codes, page title, or content descriptors have been disclosed, so the current surface‑level characteristics of the web service remain unverified. Given the recent creation date, the rapid appearance on a blocklist, and the association with a known phishing‑blocking provider, the domain should be considered a high‑confidence phishing indicator pending further behavioural evidence.

Defensive teams are advised to proactively block proposal-15.click at perimeter firewalls, proxy appliances, and DNS filtering layers. The resolved IP address 192.64.119.62 should also be added to any host‑based or network‑based deny lists, and traffic to that host should be logged for anomalous activity. Continuous monitoring of threat intel feeds for additional sightings, updates to detection signatures, or emergence of content analysis is recommended, as is periodic re‑scanning of the domain with multi‑engine sandboxes to capture any later‑stage payloads that may be introduced.