# noblemarkett294.shop — SUSPICIOUS

> Crypto drainer on noblemarkett294.shop steals digital assets with 0/95 VirusTotal detections. Verify links before clicking to avoid credential theft. Act now.

## Summary
PhishDestroy identifies a live crypto-draining domain operating as noblemarkett294.shop. This page poses as a legitimate Noble Market portal to trick users into connecting crypto wallets and signing malicious drainer transactions. Threat analysis indicates the kit automates token and NFT transfers from connected wallets without additional user prompts once the malicious signature is accepted. No specific brand name is being impersonated beyond the general "Noble Market" wording, suggesting opportunistic exploitation of the Noble brand equity in cryptocurrency circles.  This domain resolves to IP 104.21.52.21 and is served via Google Trust Services SSL, lending false legitimacy. Domain creation timestamp is May 07, 2025, and it was registered through Gabia, Inc., a South Korean registrar often used for bulk registrations. VirusTotal currently shows 0/95 antivirus detections and the domain remains unblocked by Google Safe Browsing. Public blocklists monitored by PhishDestroy also show zero listings as of the last update.  Status for noblemarkett294.shop is actively phishing with a risk level currently marked as under_investigation. Immediate response actions include flagging the domain in domain reputation feeds, updating browser blocklists, and notifying cryptocurrency wallet providers to add signature-level blocks for transactions involving this domain. Users are advised to avoid clicking any links from unsolicited messages referencing Noble Market, verify any URL manually by typing the official domain, and revoke suspicious wallet connections in wallet settings. Remaining risk is assessed as moderate due to zero detection coverage and active hosting, warranting heightened vigilance across crypto communities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-05-07 13:52:45
- Registrar: Gabia, Inc.
- IP: 104.21.52.21

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/677c1f6d-e05d-4d85-9e5f-4a778d7f7eb3
- PhishDestroy: https://phishdestroy.io/domain/noblemarkett294.shop/
- LLM endpoint: https://phishdestroy.io/domain/noblemarkett294.shop/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/noblemarkett294.shop/
Last updated: 2026-03-22