noblexchangemarket[.]com

noblexchangemarket.com is currently flagged as a high‑risk generic phishing infrastructure. The domain was registered on 11 December 2025 through Tucows Domains Inc. and resolves to the IPv4 address 208.98.35.134, which is hosted on the site4now.net name‑server cluster (ns1, ns2, ns3.site4now.net). VirusTotal has recorded a single positive detection out of 91 scanning engines, indicating at least one vendor has identified malicious activity associated with the domain.

The domain appears on one public blocklist and is actively blocked by the PhishDestroy service, confirming that threat‑intel feeds consider it malicious. No additional public reputation scores, SSL certificate details, or HTTP response codes are present in the available data, and the page title has not been captured in the current intelligence set. The lack of further metadata limits the ability to attribute a specific phishing kit or victim brand, but the classification as “generic phishing” aligns with the observed infrastructure and detection patterns.

Defenders should add the domain and its resolving IP address to firewall and proxy deny lists, ensure DNS filtering solutions incorporate the known blocklist entry, and monitor for any future resolution changes. Continuous re‑scanning of the domain with multi‑engine services such as VirusTotal is recommended to capture any evolution in the payload or hosting. Because the domain remains active as of the report date (27 July 2026), ongoing surveillance is advised to detect possible credential‑harvesting campaigns that may target users via spoofed communications.