marinadefragmetric[.]com

Analysis of the domain marinadefragmetric.com shows a recent registration on February 21, 2026 through NiceNIC International Group Co., Limited. The domain resolves to the Cloudflare IP address 188.114.97.3, which belongs to ASN 13335 and is geolocated in the United States. DNS resolution uses the Cloudflare nameservers bingo.ns.cloudflare.com and logan.ns.cloudflare.com, and the service is delivering traffic over HTTP/3. The TLS certificate presented is issued by Google Trust Services under the WE1 root, indicating a legitimate‑looking HTTPS endpoint.

The only visible page title, "Marinade × Fragmetric - mSOL Restaking Protocol," suggests an attempt to associate the legitimate brand Marinade with a partnership involving Fragmetric, a pattern commonly observed in brand‑impersonation campaigns. VirusTotal scans recorded two positive detections out of ninety‑three vendors, and the domain appears on a single security blocklist maintained by PhishDestroy. The site is currently listed as offline, which may be a temporary takedown or a deliberate shutdown after initial distribution.

Defenders should treat the domain as malicious, block the IP address 188.114.97.3 and the associated Cloudflare hostnames, and add the domain to internal URL filtering lists. Monitoring for future re‑registration or reuse of the same nameservers and certificate issuer is recommended, as attackers often recycle infrastructure. The limited detection footprint leaves the exact content of the page unverified, so further passive DNS and archival checks are advised to capture any remnants of the site before it disappears completely.