nobodydigital[.]co

Analysis date: July 27, 2026. The domain nobodydigital.co is currently flagged by the PhishDestroy blocklist as an active generic phishing infrastructure. HTTP probing returns a 301 redirect response, indicating the server is configured to forward requests, a behavior often observed in malicious redirect chains. The domain has been submitted to VirusTotal where 91 antivirus and URL‑reputation engines have evaluated the URL; at the time of analysis none of the engines reported a detection.

Absence of a detection does not constitute a safety assurance, and the domain remains listed on at least one external security blocklist. No further public intelligence such as Safe Browsing verdicts, Open Threat Exchange entries, registrar details, hosting IP, ASN, SSL certificate information, or page title has been disclosed. Consequently, the attribution of the domain to a specific phishing kit or targeted brand cannot be confirmed. The limited evidence suggests that the infrastructure is still operational, and the blocklist entry indicates that at least one security vendor has identified it as malicious.

Defenders should continue to block or sinkhole traffic to nobodydigital.co, monitor DNS queries for resolution attempts, and incorporate the domain into existing URL filtering policies. Ongoing collection of passive DNS, WHOIS, and TLS data is recommended to determine the hosting environment and potential affiliation with other malicious actors. Until more definitive artifacts are observed, the domain should be treated as a high‑confidence phishing indicator.