telcoin-proposal[.]info

telcoin-proposal.info is currently active and returns HTTP 200 responses. The domain resolves to 188.114.96.3, an IP owned by Cloudflare, Inc. located in Canada. DNS is served by lilyana.ns.cloudflare.com and stanley.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the WE1 CA, indicating the site is reachable over HTTPS with a valid certificate. VirusTotal records show that four of ninety‑one security vendors have flagged the domain, and it is listed on a single public blocklist. PhishDestroy has already added the domain to its blocklist, reinforcing the assessment of malicious intent. Registration details list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar, but no further attribution is available. While the exact phishing payload or targeted brand has not been disclosed, the combination of active hosting, valid SSL, Cloudflare front‑end, and multiple vendor detections aligns with a high‑risk generic phishing operation. Defenders should block the domain at perimeter and DNS layers, monitor for related C2 infrastructure, and consider adding the IP address to threat intel feeds.