propten[.]net

On 29 May 2026 the domain propten.net was registered through Internet Invest, Ltd. dba Imena.ua. The registration is recent and the domain is still active as of the report date, 21 July 2026. Authoritative DNS records point to Cloudflare’s name servers coleman.ns.cloudflare.com and kallie.ns.cloudflare.com, indicating the use of Cloudflare’s CDN and DNS mitigation services. A DNS A‑record resolves the domain to the IPv4 address 188.114.97.3. That address is listed in public threat‑intelligence feeds and currently appears on at least one security blocklist, suggesting it is shared with other malicious infrastructure. Multiple detection engines have flagged the domain. VirusTotal reports that 1 of 95 scanned security vendors identified it as malicious, and the domain is also listed by the PhishDestroy blocklist, confirming that security communities have observed abusive activity associated with the host. No additional public reputation scores, SSL certificate details, or HTTP response codes are available in the provided intelligence, so the exact nature of the hosted content cannot be verified at this time. Given the recent creation date, the use of Cloudflare’s infrastructure, and the presence on a known phishing blocklist, the domain should be treated as high‑risk. Defensive teams are advised to add 188.114.97.3 and propten.net to network and DNS deny lists, monitor outbound DNS queries for the domain, and consider employing URL filtering solutions that reference the PhishDestroy list. Continuous re‑evaluation is recommended, as further analysis may reveal additional indicators such as page title, SSL fingerprint, or payload characteristics.