nobil-rendante[.]com

Nobil-rendante.com masquerades as an AI-based trading platform but is flagged as malicious by 12 out of 95 vendors on VirusTotal. The site, now offline, was listed on public blocklists including PhishDestroy, MetaMask, and SEAL. It was also flagged by Google Safe Browsing, indicating its deceptive nature.

The domain, registered through NETIM SAS and hosted on an IP address in the US by HostPapa, was created on February 21, 2026. However, PhishDestroy detected it two days earlier, on February 19, 2026. This discrepancy highlights the proactive nature of PhishDestroy's monitoring systems, which can identify threats even before their official domain registration.

The site claimed to offer a sophisticated trading platform using artificial intelligence, as suggested by its page title "Nobil Rendante | Piattaforma di trading basata sull'IA – Sito ufficiale." Despite these claims, the domain's fraudulent intent is clear from its swift inclusion in multiple blocklists and its Google Safe Browsing flag. The use of Let's Encrypt for SSL certification is common among phishing sites, as it provides a veneer of legitimacy.

The rapid takedown of nobil-rendante.com underscores the effectiveness of collaborative efforts in the cybersecurity community to mitigate threats. Although offline, the domain's existence serves as a reminder of the ongoing challenges posed by phishing scams, particularly those exploiting emerging technologies like AI to lure unsuspecting victims.