bonus-marinade[.]com

The domain bonus-marinade.com is a brand impersonation threat targeting Marinade, a legitimate cryptocurrency protocol. As of the latest analysis, this domain is offline, but its registration and technical indicators suggest it was set up for phishing. The site was created on December 01, 2025, through registrar Dynadot LLC, and resolves to IP address 188.114.97.3. Its SSL certificate is issued by Google Trust Services, lending a false sense of legitimacy. VirusTotal flags this domain with 10 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. AlienVault OTX includes it in a threat intelligence pulse, indicating broader recognition of its malicious intent.

This domain was specifically designed to impersonate Marinade, likely to steal credentials, wallet keys, or other sensitive information from users. The page title displayed a 504 Gateway Time-out error, which may indicate the site was taken down or is under maintenance. However, the infrastructure remains a risk, as similar domains could be spun up quickly. The combination of a newly registered domain, brand impersonation, and multiple security vendor flags points to a coordinated phishing campaign.

Given the elevated risk level, users should avoid any interaction with bonus-marinade.com or similar domains. Marinade users are advised to verify URLs carefully and only access the official website. PhishDestroy recommends checking the full report for ongoing monitoring and to report any related suspicious activity. As the domain is currently offline, the immediate threat is mitigated, but vigilance is necessary as phishing actors often reuse infrastructure.