proposal-2[.]click

proposal-2.click was registered through Namecheap on 15 July 2026 and is currently resolved to the IPv4 address 75.2.60.5. The domain is serviced by the authoritative name servers dns1.registrar-servers.com and dns2.registrar-servers.com. As of 17 July 2026 the domain remains active and is listed with a risk level of under_investigation. Automated analysis on VirusTotal indicates that the payload was submitted to 95 scanning engines, none of which reported a detection at the time of analysis; this absence of detections does not constitute a safety assurance. The classification of the domain as generic_phishing derives from its inclusion in threat‑intel feeds, but no content has been captured to confirm the phishing vector, landing page, or targeted brand. Consequently, the operational details of the phishing campaign—such as credential‑stealing forms, email lure characteristics, or victim demographics—are presently unknown. Defenders should monitor DNS queries for the domain and its associated IP address, block network traffic to 75.2.60.5, and add the domain and name‑server pair to URL filtering or web‑proxy deny lists. Continuous re‑scanning on multi‑engine sandboxes is advised to detect any future payload changes, and any observed malicious activity should be reported to the appropriate incident response team for further forensic collection.