proposal-blockstreet[.]com

proposal-blockstreet.com was first observed on September 24, 2025 when the domain registration record was created through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the Cloudflare‑owned address 172.67.180.120, which is associated with AS13335 in the United States. No SSL certificate is present, and the site presented a single HTML title of “Just a moment…”. Automated analysis by VirusTotal recorded two detections out of ninety‑five scanned vendors, indicating a low but non‑zero malicious rating.

Independent blocklist services PhishDestroy and ScamSniffer have added the domain to their phishing lists, and the domain appears on two additional security blocklists. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the classification as malicious. The nameservers listed are adelaide.ns.cloudflare.com and jacob.ns.cloudflare.com, confirming the use of Cloudflare DNS infrastructure. As of the report date, July 25, 2026, the domain is reported as taken offline, and no active HTTP service was observed.

The limited public evidence – primarily the page title and lack of TLS – prevents a deeper determination of the specific phishing campaign or target audience. Defenders should continue to block the domain at perimeter filters, monitor the associated IP address for any future re‑use, and add the observed indicators (domain name, IP, nameservers, and Gridinsoft score) to internal threat‑intel feeds. Ongoing vigilance is advised because the underlying Cloudflare infrastructure could be repurposed for new malicious sites.