proposal-bananagun[.]info

Analysis indicates proposal-bananagun.info is a recently registered domain exhibiting high-risk phishing characteristics. The domain was created on July 30, 2026, and remains active as of August 01, 2026. Infrastructure analysis reveals it is hosted on Cloudflare nameservers (emma.ns.cloudflare.com and jim.ns.cloudflare.com) and resolves to the IP address 104.21.34.74. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting confirmed malicious activity targeting users through fraudulent schemes.

No vendor detections were recorded in the most recent VirusTotal scan, which included 91 security engines. However, the absence of detections does not confirm safety, particularly for newly registered domains where detection coverage may still be developing. The registrar, NICENIC INTERNATIONAL GROUP CO., LIMITED, is frequently associated with domains involved in phishing and fraudulent activity, though this alone is not conclusive evidence of malicious intent. The exact nature of the phishing content remains unconfirmed, as no page title, brand target, or scam type has been provided in available intelligence.

Defenders should treat this domain as an active threat, particularly in environments where phishing-resistant controls are not enforced. Recommended actions include blocking the domain at DNS and proxy levels, monitoring for connections to the associated IP (104.21.34.74), and reviewing logs for any prior interactions with this infrastructure. Given its recent creation and active blocklist status, continued vigilance is advised until further analysis or takedown occurs.