proposal-yieldbasis[.]xyz

The domain proposal-yieldbasis.xyz was registered on July 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and remains active as of the report date, July 30, 2026. Authority for the zone is delegated to Cloudflare name servers brad.ns.cloudflare.com and elisabeth.ns.cloudflare.com, indicating the use of a reputable DNS provider to obscure the true hosting location. Resolution points to the IPv4 address 188.114.96.3, a host that is currently listed on three public security blocklists and is specifically blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show that five of ninety‑one security vendors have flagged the domain, suggesting that a minority of scanners have observed malicious characteristics, while the majority have not raised an alert.

No additional intelligence such as Safe Browsing verdicts, Open Threat Exchange entries, SSL certificate details, or HTTP response codes is available in the current data set. Consequently, the precise content served by the site, including page titles or any impersonated brand, remains unverified. The limited detection footprint combined with active blocklist listings indicates a high‑risk profile despite the modest vendor count. Defenders should immediately add proposal-yieldbasis.xyz to DNS‑based deny lists and ensure that outbound traffic to the associated IP address 188.114.96.3 is blocked at the firewall level.

Continuous monitoring of Cloudflare name‑server records is advisable to detect any rapid changes that may signal a shift in infrastructure. Given the recent creation date, the domain may be part of a short‑lived phishing campaign; therefore, security teams should also watch for related domains registered by the same registrar within a similar timeframe. Until further content analysis is performed, the domain should be treated as a high‑confidence phishing indicator and proactively excluded from user access paths.