proposal-arrowfinance[.]info

The domain proposal-arrowfinance.info is currently active and serves HTTP content with a 200 response code. DNS resolution points to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. and geolocated to Canada. The authoritative name servers are evan.ns.cloudflare.com and mckenzie.ns.cloudflare.com, both belonging to Cloudflare’s DNS infrastructure. Registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com, and the site presents a TLS certificate issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint.

Threat intelligence platforms have flagged the domain as a generic phishing site. VirusTotal analysis shows that four of ninety‑one security vendors have raised detections for the domain. Independent blocklist operators—PhishDestroy, MetaMask, and SEAL—have added the domain to their deny lists, and it appears on three additional public security blocklists. These indicators collectively suggest malicious use, although the precise phishing payload or targeted brand has not been disclosed.

Defenders should treat the domain as high‑risk. Recommended actions include adding the domain and its resolving IP address to web‑filter and DNS‑sinkhole policies, updating intrusion‑prevention signatures to block traffic to 188.114.97.3, and monitoring outbound connections for any attempts to contact the domain. Continuous re‑evaluation is advised, as the infrastructure may evolve, but the current evidence supports immediate containment and active monitoring.