proinvestweb[.]com

Analysis of proinvestweb.com shows a domain that is currently active and under investigation for generic phishing. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on July 10, 2025. It resolves to the IP address 5.182.209.89 and uses the authoritative name servers ns1.pwxs.net and ns2.pwxs.net.

Threat intelligence indicates that the domain appears in two AlienVault OTX pulses, suggesting that it has been observed in multiple threat reports. VirusTotal records show that the domain was scanned by 91 security vendors, none of which flagged it as malicious at the time of scanning; this lack of detection does not constitute a safety guarantee. The domain is blocked by PhishDestroy and is listed on one external security blocklist, reinforcing the view that it is considered hostile by at least some defensive services.

No public information is available regarding SSL certificates, HTTP response codes, or page titles, so the content of the site remains unverified. Defenders should treat proinvestweb.com as a potential phishing source, enforce blocking at network perimeters, add the domain to internal deny lists, and continue monitoring for any changes in detection status or additional intelligence. Ongoing observation of the associated IP address and name servers is advised, as they may be reused for further malicious campaigns.