proposal-bonzo[.]finance

Analysis indicates that the domain proposal-bonzo.finance is a confirmed phishing site, currently active and associated with high risk. The domain was created recently on July 17, 2026, and resolves to the IP address 172.67.168.190. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, which has been linked to various low-reputation domains in the past. The domain has been flagged by two security blocklists and is actively blocked by platforms such as MetaMask and SEAL, further supporting its malicious classification. Threat intelligence from AlienVault OTX has recorded this domain in two separate threat pulses, indicating it has been previously associated with phishing attempts. Furthermore, analysis from VirusTotal reveals that 3 out of 95 security vendors have flagged this domain as potentially malicious. Given these indicators, defenders should take immediate action to monitor for any phishing attempts associated with this domain and ensure that protective measures are implemented to safeguard users from potential threats.