katana-network[.]site

PhishDestroy identifies katana-network.site as an active brand impersonation domain targeting Manta. The domain is currently under investigation and remains unresolved, posing a credible threat to users who may confuse it with official Manta services. This investigation was initiated due to its deceptive similarity to legitimate brand domains and suspicious operational patterns.

This domain was flagged by 7 of 95 VirusTotal vendors, indicating that it has not yet been widely recognized as malicious by security engines. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 19, 2026, and resolves to IP address 188.114.97.3. The domain has been blocked by ScamSniffer and appears on 1 security blocklist. It utilizes a Let's Encrypt SSL certificate, which does not enhance trust due to the impersonation nature of the domain. Trust scores and detection rates remain critically low, with no vendor recognition at the time of analysis.

The current status of katana-network.site is active and under investigation, with actionable indicators of compromise (IOCs) including the domain name, IP address, and registrar details. Users and organizations are strongly advised to block this domain at the network level and avoid any interaction with it. Security teams should monitor for connections to 188.114.97.3 and inspect internal logs for any historical or future traffic to this IP or domain. Additionally, organizations should update threat intelligence feeds to include this domain and share IOCs with industry peers to prevent further exploitation. Immediate remediation includes DNS filtering, firewall rules, and user awareness training to reduce exposure to this impersonation campaign.