proposal-7[.]click

PhishDestroy first observed proposal-7.click on Jul 17, 2026. The captured page title is “proposal-7.click is registered at Namecheap”. Current evidence score: 100/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 13 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, SOCRadar, VIPRE on Jul 29, 2026 at 02:00 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 17, 2026 at 14:30 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Jul 17, 2026 at 05:50 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:27 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:21 UTC. Registration records for the domain list NAMECHEAP as the registrar and Jul 15, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 216.227.142.170 on AS30058 (FDCSERVERS - FDCservers.net, US). The recorded endpoint location is Los Angeles, US. The stored server header is nginx/1.28.3 (Ubuntu). DOM analysis on Jul 17, 2026 at 06:20 UTC returned 100/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YE1 as the certificate issuer with validity through Oct 16, 2026; checked Jul 19, 2026 at 01:00 UTC.

The content indicators and 4 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.