xn--marinae-46a[.]finance

The domain xn--marinae-46a.finance is a brand impersonation phishing site targeting Solana users. It poses as a legitimate platform for staking rewards, specifically mimicking the Marinade service, to trick users into connecting their wallets and stealing funds. This site is classified as a wallet_connect_phish scam. As of the latest check, the site has been taken offline, but its previous activity posed an elevated risk to cryptocurrency holders.

Technical analysis shows that xn--marinae-46a.finance was flagged by 2 of 95 VirusTotal vendors, including alphaMountain.ai and G-Data. The domain was registered through NCNET-1 (ASN 22612), which resolves to IP address 199.188.201.188, located in the US and associated with Namecheap, Inc. It appears on 2 security blocklists: PhishDestroy and ScamSniffer. The page title observed was 'Maximize Solana Staking Rewards with Marinade', and no SSL certificate was issued. The Gridinsoft trust score is 0/100, indicating high risk. Google Safe Browsing did not flag the domain, and creation date is not available.

Users who may have interacted with xn--marinae-46a.finance should take immediate safety steps. Since this is a crypto drainer scam involving wallet connection, revoke any token approvals granted to the site and move all funds to a new, secure wallet. Change passwords for any accounts used on the site, enable two-factor authentication where possible, and monitor for unauthorized transactions. Report the domain to security blocklists like PhishDestroy and ScamSniffer, and consider filing a complaint with the registrar NCNET-1.