propedia[.]co[.]jp

Analysis of propedia.co.jp, first observed on the public phishing-domain feed on July 22, 2026, indicates that the domain is currently active and has been associated with a generic phishing campaign. The domain was registered on May 18, 2010, and continues to resolve to the IPv4 address 160.251.51.239. DNS resolution is delegated to Cloudflare nameservers damiete.ns.cloudflare.com and naya.ns.cloudflare.com, suggesting that the infrastructure leverages Cloudflare's DNS and potentially its CDN or proxy services.

The domain appears on a single known blocklist, PhishDestroy, confirming that at least one security provider has flagged it as malicious. VirusTotal reports that the domain has been scanned by 95 vendors, none of which currently list it as malicious; however, the absence of detections does not constitute a safety assurance and should not be interpreted as evidence of benign intent. No additional intelligence such as SSL certificate details, HTTP response codes, page title, Safe Browsing status, OTX mentions, or other blocklist entries is presently available.

Consequently, the confidence level regarding the full scope of the threat remains limited to the observed blocklist entry and the domain's active resolution. Defenders should block or monitor traffic to propedia.co.jp, enforce URL filtering, and consider adding the domain to internal deny lists. Continuous re‑evaluation is advised, as further evidence—such as malicious payloads, credential harvesting pages, or victim reports—could emerge and alter the risk posture.