app-marinade[.]org
Ringkasan bukti
The domain app-marinade.org was registered on April 04, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and immediately pointed at Cloudflare’s network. The authoritative name servers are adelaide.ns.cloudflare.com and cosmin.ns.cloudflare.com, both belonging to Cloudflare, Inc. DNS resolution returns the IPv4 address 188.114.97.3, which is geolocated to Canada and associated with Cloudflare’s edge infrastructure. The site presents a Let's Encrypt certificate (issuer E8), indicating the presence of TLS but offering no evidence of a legitimate certificate chain beyond the free CA. Gridinsoft’s trust scoring assigns a rating of 0 out of 100, and the domain appears on a single public blocklist.
Threat intelligence correlates the domain with a brand‑impersonation campaign targeting the Marinade brand. AlienVault OTX lists the domain in eight distinct pulses, and PhishDestroy has already added it to its blocklist. VirusTotal analysis shows that two out of ninety‑five security scanners flagged the domain, suggesting at least partial malicious behavior. An HTTP request to the root URL returns a 403 status code, which may indicate a deliberately restricted landing page or a protective response from the hosting provider. The domain remains active as of the report date.
Defenders should assume the domain is being used to harvest credentials or distribute malicious payloads under the guise of Marinade. Immediate mitigation steps include adding 188.114.97.3 to outbound deny lists, enforcing URL filtering for any sub‑domain of app‑marinade.org, and monitoring DNS queries for the associated Cloudflare name servers. Since the actual page content has not been publicly analyzed, further investigation—such as sandboxing any retrieved pages and inspecting TLS handshake details—is recommended to confirm the payload type. Continuous feed updates from PhishDestroy, AlienVault OTX, and VirusTotal will help maintain situational awareness.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Bukti hasil tersimpan
Hasil dan atribusi penonaktifan
- Hasil
protected- Ketersediaan
reachable_protected- Penyebab
cloudflare_challenge- Pelaku
- Cloudflare
- Mekanisme
challenge- Tingkat keyakinan
- 85%
- Pengamatan pertama
- Pengamatan terbaru
SHA-256 bukti 7123d158d2d4
Linimasa deteksi
-
Ketersediaan
Nilai tersimpan pertama: Tidak diketahui
993d00c35140 -
Ketersediaan
Tidak diketahui → Dilindungi
f0b400b731d5 -
Ketersediaan
Dilindungi → Tidak diketahui
1215e54a10f2 -
Ketersediaan
Tidak diketahui → Dilindungi
c70c002b5623 -
Ketersediaan
Dilindungi → Tidak diketahui
7cebcfd4071c -
Ketersediaan
Tidak diketahui → Dilindungi
34b05b896e55 -
Ketersediaan
Dilindungi → Tidak diketahui
ca255b61650a -
Ketersediaan
Tidak diketahui → Dilindungi
37a73119603e -
Ketersediaan
Dilindungi → Tidak diketahui
d8f7d37d7f95 -
Ketersediaan
Tidak diketahui → Dilindungi
607d59f40e67
Tampilkan semua (2)
-
Ketersediaan
Dilindungi → Tidak diketahui
afa49a2b04dd -
Ketersediaan
Tidak diketahui → Dilindungi
7123d158d2d4
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 04/04/2026
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive