proposal-11[.]click

Analysis of the domain proposal-11.click shows that it is actively serving a generic phishing campaign. The domain was registered through NAMECHEAP INC on July 23, 2026 and is still active as of the report date, July 25, 2026. DNS resolution points to the IPv4 address 75.2.60.5, which is hosted by the authoritative nameservers dns1.registrar-servers.com and dns2.registrar-servers.com.

The domain appears on a single security blocklist and is currently listed by PhishDestroy, indicating that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal has scanned the domain using 91 vendor engines; none of the engines reported a detection, but the absence of a detection does not constitute a safety guarantee. No information is available regarding SSL certificates, HTTP response codes, page title, or any brand targeting, so the exact content of the site remains unverified.

The limited data set leaves uncertainty around the specific phishing lure employed and any associated payloads. Defenders should treat the domain as hostile, block the domain and its resolving IP at perimeter firewalls and DNS filtering solutions, and continue monitoring for any new indicators such as content changes, additional blocklist listings, or emerging detection signatures. Ongoing intelligence collection is recommended to refine the threat profile and to assess whether the infrastructure expands to other domains or IP ranges.