xmmaq[.]marrakeshh1[.]top

The domain xmmaq.marrakeshh1.top is identified as a phishing threat, with 3 out of 91 vendors on VirusTotal marking it as malicious. Despite its current offline status, it has been included in public blocklists, notably by PhishDestroy. This indicates that the domain was actively used for malicious purposes before being taken down.

Registered with NameSilo,LLC, xmmaq.marrakeshh1.top was created on May 27, 2026. The use of NameSilo,LLC as a registrar is common among malicious actors due to its affordable pricing and ease of registration. The domain's quick takedown suggests that it was part of a short-lived phishing campaign, possibly targeting users with fraudulent schemes.

Phishing domains like xmmaq.marrakeshh1.top exploit the time window between domain registration and the propagation of detection signatures across antivirus databases. This domain's presence on PhishDestroy's blocklist underscores the importance of upstream threat intelligence in identifying and mitigating threats during this critical period. Although currently offline, the domain's brief activity highlights the ongoing challenge of combating phishing attacks in real-time.