proposal-strata[.]live

This domain is flagged as a credential theft operation, designed to harvest login credentials through deceptive login portals or fake authentication prompts. Analysis indicates the site may impersonate corporate or financial platforms to trick users into submitting sensitive information, though no specific brand impersonation has been confirmed yet. The threat remains under active investigation due to its low detection rate and recent registration. Infrastructure analysis reveals the domain proposal-strata.live was registered on June 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It currently resolves to the IP address 188.114.96.3, which has not been widely flagged in blocklists or threat intelligence feeds. VirusTotal reports 0/95 detections, suggesting the domain has successfully evaded automated security scanning tools. No trust scores or community reports are available at this time, further complicating risk assessment. To mitigate credential theft risks associated with this domain, organizations should implement the following measures: block the domain and its resolving IP (188.114.96.3) at the network perimeter using firewalls or DNS filtering. Deploy email security controls to quarantine messages containing links to proposal-strata.live, particularly those with urgent or authentication-related themes. Conduct user awareness training to emphasize verification of login portals, including checking for HTTPS, domain spelling, and organizational branding before entering credentials. Monitor network logs for connections to the domain or IP, and investigate any successful access attempts. Security teams should submit the domain to threat intelligence platforms to improve detection coverage across the security community.