proposal-9[.]click

Analysis indicates that the domain proposal-9.click was registered through Namecheap Inc on July 15, 2026 and is currently active. The authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com, and DNS resolution points to the IPv4 address 162.255.119.102. The domain has been submitted to VirusTotal and examined by 95 scanning engines; none of the engines reported a detection at the time of analysis. Although the absence of detections does not confirm benign intent, the classification as generic_phishing suggests the infrastructure is being used for credential‑stealing or information‑gathering campaigns. Publicly available evidence does not reveal the specific brand or service being spoofed, and no page‑level content has been captured. Consequently, the precise lure employed by the site remains unknown. The short registration window (two days before the report date) and the use of generic click‑bait naming patterns are consistent with other fast‑flux phishing operations observed in recent months. Defenders should treat proposal-9.click as malicious. Recommended actions include adding the domain and the associated IP address to block lists at network perimeter devices, updating DNS filtering policies to deny resolution, and configuring email security gateways to flag any messages containing links to this domain. Continuous monitoring of the IP address for additional malicious activity, as well as periodic re‑scanning on VirusTotal or similar platforms, is advised to detect any future changes in the payload or detection status. Incident response teams should also consider investigating any internal logs for prior connections to the domain or its IP to assess potential compromise.