# katana138.net — MALICIOUS

> katana138.net is actively pushing credential-harvesting phishing pages. 12/95 security vendors flag this domain. Check the full report.

## Summary
PhishDestroy identifies katana138.net as an active credential-harvesting phishing domain currently propagating in the wild. The page is designed to trick users into surrendering login credentials and should be treated as an elevated threat to enterprise and consumer accounts alike. Immediate defensive action is required.  This domain was flagged by 12 out of 95 VirusTotal security vendors, indicating broad suspicion across antivirus, reputation, and phishing-intelligence platforms. It resolves to 159.100.22.195 and was registered on March 16, 2024 through NameSilo, LLC. The domain is also covered by multiple public and commercial blocklists and holds a low trust score due to its recent creation and short-lived SSL certificate issued by Let’s Encrypt.  Organizations and individuals should block katana138.net at DNS and edge firewalls. Users who may have visited the site should rotate passwords, enable multi-factor authentication, and scan endpoints for follow-on malware or session hijacking. If your SIEM or SOAR ingests blocklists, add this domain immediately as an active indicator of compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-03-16 19:05:27
- Registrar: NameSilo, LLC
- IP: 159.100.22.195

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/43fc0c81-b3eb-419d-8cda-e2c2c5f060e3
- PhishDestroy: https://phishdestroy.io/domain/katana138.net/
- LLM endpoint: https://phishdestroy.io/domain/katana138.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/katana138.net/
Last updated: 2026-03-29