proposal-sei[.]xyz

Analysis of the domain proposal-sei.xyz indicates it is an active phishing site under investigation as of July 25, 2026. The domain was registered on July 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolves to the IP address 104.21.43.40 and utilizes Cloudflare nameservers (leonidas.ns.cloudflare.com and monika.ns.cloudflare.com), a configuration commonly observed in phishing campaigns to obscure hosting origins and evade detection.

At the time of this report, the domain appears on one security blocklist, and it is actively blocked by PhishDestroy, a specialized anti-phishing service. No detections were recorded by the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety. The domain remains operational, and its content has not been fully analyzed for specific phishing tactics or targeted brands.

Defenders should treat proposal-sei.xyz as a potential threat, particularly given its recent registration and use of Cloudflare infrastructure, which may indicate an attempt to exploit trust in business-related communications. Monitoring for additional blocklist inclusions and further vendor detections is recommended to assess its evolving risk profile.