proposals-s[.]network

proposals-s.network is flagged as a generic phishing infrastructure that mimics Sonic Labs, as indicated by the page title “Rewards Vote | Sonic Labs”. The domain was registered on 21 February 2026 and resolves to the IPv4 address 213.111.154.75, which belongs to the autonomous system AS43641 operated by SOLLUTIUM EU Sp z.o.o. in the Netherlands. The hosting location places the server in a European jurisdiction, but the same IP appears on a single security blocklist and has been captured by the PhishDestroy mitigation service. The SSL certificate presented for the host is labeled “R11”, suggesting a low‑trust rating, although the certificate details themselves have not been publicly disclosed.

VirusTotal analysis shows that 7 out of 93 scanning engines flagged the domain, providing modest but notable detection coverage. The site’s HTTP response is currently offline, preventing any direct content inspection; the page title remains the only observable artifact of the intended brand impersonation. The available evidence confirms that the infrastructure is deliberately crafted to lure victims into a “Rewards Vote” scenario associated with Sonic Labs, a known brand in the security‑software space. However, because the service is offline, the exact landing page, credential‑harvesting mechanisms, or payload delivery methods cannot be verified.

Defenders should continue to block the domain at network perimeter and DNS layers, add the IP address 213.111.154.75 to host‑based deny lists, and monitor for any re‑hosting attempts by the same ASN. Continuous re‑scanning on VirusTotal or similar multi‑engine platforms is advised to capture any future changes in detection ratio. Organizations using Sonic Labs services should be warned that email or social‑media messages referencing a “Rewards Vote” could be leveraging this domain as a lure, and users should be instructed to verify URLs against official Sonic Labs channels before entering credentials.