claims-noble[.]xyz

PhishDestroy has elevated the risk level of claims-noble.xyz due to active crypto-drainer operations targeting cryptocurrency wallets and exchange logins. This domain impersonates Noble-branded services to trick users into entering private keys or seed phrases, which are then drained to attacker-controlled addresses. All activity should be treated as hostile until verified otherwise. This domain was flagged by PhishDestroy’s threat intelligence pipeline after it registered on April 20, 2026 via PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP 172.67.185.73 and holds a valid Let’s Encrypt SSL certificate. VirusTotal detection remains critically low at 1 out of 95 security vendors, indicating stealth deployment. The domain shows no prior inclusion on major blocklists such as Google Safe Browsing or PhishTank as of analysis time. Users are strongly advised to avoid interacting with claims-noble.xyz or similar “claim”-branded domains offering wallet logins or seed recovery. Before entering credentials or private keys, verify the URL using PhishDestroy’s real-time scanner. Enable hardware wallet signing, revoke any exposed approvals via blockchain explorers, and report suspicious domains immediately to enhance collective defense.