x-marinadefinance[.]xyz

The domain x-marinadefinance.xyz has been identified as a high-risk infrastructure engaging in brand impersonation. This domain currently impersonates the brand Marinade and is still active as of the latest assessment. The threat type is categorized as brand impersonation, which poses a significant risk to users who may be misled into interacting with what appears to be a legitimate Marinade service.

Analysis indicates that x-marinadefinance.xyz is flagged by 3 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 104.21.64.236, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was created on May 16, 2026, and currently appears on one security blocklist. It is also blocked by PhishDestroy. The lack of an SSL certificate further reduces the domain's trustworthiness and may indicate a low-effort or hastily set up phishing infrastructure.

Given the current status of the domain as active, it is recommended that users avoid interacting with x-marinadefinance.xyz to prevent potential phishing attacks. Network administrators and security teams should consider adding this domain to their blocklists and implementing additional monitoring to detect and mitigate any related malicious activity. Further investigation into the IP address and associated infrastructure may reveal additional threats or related domains that should be monitored and blocked.