proposal-14[.]click

The domain proposal-14.click was registered through NAMECHEAP on July 23, 2026 and is currently active. DNS resolution points to the IP address 162.255.119.156, and the authoritative nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com. VirusTotal analysis shows that one of ninety‑one security vendors flagged the domain, indicating at least a minimal level of detection confidence.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing infrastructure. No additional telemetry such as SSL certificate details, HTTP response codes, or page title information is available in the current intelligence set, leaving the exact content and target of the phishing lure unverified. Defenders should prioritize immediate containment actions: add proposal-14.click to DNS and URL filtering policies, block the associated IP address 162.255.119.156 at network perimeters, and ensure that endpoint security solutions are updated to reflect the single vendor detection.

Continuous monitoring of the domain's resolution and any emerging blocklist entries is advised, as further indicators may surface as the campaign evolves. Given the recent creation date and the active status, the infrastructure is likely in an early deployment phase, and swift mitigation can prevent broader exposure.