marinade-sol[.]app

This domain, marinade-sol.app, was registered through Web Commerce Communications Limited dba WebNic.cc and first observed on August 24 2025. The site resolves to the IPv4 address 87.120.126.163, which belongs to AS215730 H2NEXUS LTD and is geolocated in Germany. Passive DNS and host analysis indicate that the infrastructure is shared with other malicious actors, as the IP appears on a single external security blocklist. The domain presents a page titled “Yield Recipe”, a title that does not correspond to the advertised brand and suggests a content mismatch.

The SSL certificate is identified as type R12, but no further certificate details are disclosed. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of reputation. On VirusTotal, eleven of ninety‑three scanning engines flagged the domain as malicious, providing additional corroboration of its abusive nature. The site is listed as impersonating Google and is categorized as credential phishing, consistent with the observed intent to harvest login credentials.

The domain has been taken offline, and the blocklist PhishDestroy already includes it, reducing immediate exposure but leaving the hosting IP still active. Defenders should add 87.120.126.163 to network deny lists, monitor for any re‑use of the domain or similar hostnames, and enforce Google‑specific anti‑phishing controls. Continuous observation of the registrar WebNic.cc for new registrations that mimic popular brands is also recommended. While the page content has not been captured, the combination of low trust score, vendor detections, blocklist presence, and brand impersonation provides sufficient evidence to treat the domain as malicious.