proposal-katana[.]network

The domain proposal-katana.network was registered on March 08, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to the Cloudflare‑owned address 104.21.70.250, hosted in the United States under ASN 13335. The site presents a TLS certificate issued by Let’s Encrypt (E7) and negotiates HTTP/3, but HTTP requests return a 403 status code. Automated analysis assigns a Gridinsoft trust score of 0 / 100, indicating a high likelihood of malicious intent.

The page title returned by the server is “katana”, and the domain is associated with a brand‑impersonation campaign targeting Discord users, specifically employing wallet or seed phishing techniques. Three independent blocklists have listed the domain, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal logs show that one of ninety‑four scanning engines flagged the domain, reinforcing the suspicion. The infrastructure relies on Cloudflare’s edge network, which masks the true origin server and complicates takedown efforts.

Defenders should add 104.21.70.250 to network deny lists, enforce DNS filtering for proposal‑katana.network, and monitor for any resurgence of the domain or related sub‑domains. Continuous observation of the associated blocklists and periodic re‑scans on VirusTotal are recommended to capture any changes in detection status. Because the site is already offline, immediate containment is limited to preventing future re‑registration or reuse of the same name.