marinads[.]finance

As of July 23, 2026, the domain marinads.finance is flagged for brand impersonation, specifically targeting the brand 'Marinade'. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026. Analysis indicates that the domain was used to impersonate Marinade, likely in an attempt to trick users into believing they were interacting with a legitimate $MNDE airdrop. The site has been taken offline, and it is currently not resolving to any active content.

However, the infrastructure used included Cloudflare nameservers (jasmine.ns.cloudflare.com and kyree.ns.cloudflare.com) and resolved to the IP address 188.114.97.3, which is located in the United States under the ASN AS13335, operated by Cloudflare, Inc. The domain was detected and blocked by two security vendors, PhishDestroy and ScamSniffer, and appears on two security blocklists. The SSL certificate for the domain was issued by Google Trust Services, indicating that it had a valid HTTPS connection. The exact content of the page is not yet analyzed, but the page title 'MNDE airdrop' suggests a potential crypto-related scam.

Defenders should remain vigilant and ensure that the domain remains blocked in their security systems. Additionally, it is recommended to monitor for any new registration or activity related to this domain, as it may be reactivated. If users report any exposure to this domain, incident response protocols should be followed to minimize potential damage.