Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@microsoft.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
api-staging-swap[.]marblefashions[.]co[.]uk
“ATOM108 âï¸ Platform Game Slot Digital Yang Lagi Naik Daun Hari Ini”
api-staging-swap.marblefashions.co.uk — Non verificato. Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrar: 1api.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy’s threat intelligence network has flagged api-staging-swap.marblefashions.co.uk as an active cryptocurrency drainer domain. The page masquerades as a staging swap portal for Marble Fashions, a fashion retailer, to trick visitors into connecting crypto wallets under the guise of a limited-time discount or early-access sale. Once a wallet is linked, the drainer silently approves token transfers and drains NFTs and stable-coins, often within seconds of connection. This domain was flagged via PhishDestroy’s seed 09c08c and remains undetected by VirusTotal, with 0 detections out of 95 engines as of the latest scan. It was registered through 1api GmbH on June 22, 2009, and resolves to a Microsoft Azure cloud IP (20.17.121.1) operated by DigiCert Inc for SSL. The age and legitimate-looking certificate are consistent with carefully staged phishing infrastructure designed to bypass reputation filters. If you visited api-staging-swap.marblefashions.co.uk, immediately revoke any wallet approvals via your wallet’s “Connected Apps” or “Revoke Approvals” section—do not rely solely on browser extensions. Disconnect the device from the internet, clear browser cookies and cached data, and run a full antivirus scan. Then verify the domain’s status and any additional indicators of compromise on PhishDestroy to confirm safety before reconnecting wallets or entering credentials.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 11 identified
Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.
developers.google.com Confidenza al 100%Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confidenza al 100%Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Confidenza al 100%AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.
www.amp.dev Confidenza al 100%Modernizr is a JavaScript library that detects the features available in a user's browser.
modernizr.com Confidenza al 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confidenza al 100%Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.
developers.google.com Confidenza al 100%Funding Choices is a messaging tool that can help you comply with the EU General Data Protection Regulation (GDPR), and recover lost revenue from ad blocking users.
developers.google.com Confidenza al 100%Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confidenza al 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of api-staging-swap.marblefashions.co.uk · checked Apr 24, 2026
Dati e relazioni esterne
PD-20260424-902F9D Recipient: abuse@microsoft.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo