telcoins-proposal[.]info

The domain telcoins-proposal.info is currently active and resolves to the Cloudflare‑fronted address 104.21.25.243, which is geolocated to Canada and owned by Cloudflare, Inc. Registration data shows the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED, and DNS resolution is handled by ingrid.ns.cloudflare.com and coen.ns.cloudflare.com. An HTTPS service is available, presenting a certificate issued by Google Trust Services under the WE1 root, and the web server returns HTTP 200 responses, indicating a reachable payload. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, reflecting that at least one external entity has flagged it as malicious. VirusTotal scans report that four of ninety‑one security vendors flagged the domain, providing additional corroboration of its malicious nature. No public page title, brand target, or phishing kit details have been disclosed, so the exact content and impersonated entity remain unknown. Given the high risk rating, defenders should add telcoins-proposal.info to deny‑list rules at perimeter and endpoint layers, enforce TLS inspection to capture any credential submissions, and monitor DNS queries for the domain. Continuous re‑evaluation is advised as additional intelligence, such as the phishing landing page content, may emerge.