noircas[.]com

This domain, noircas.com, was registered on February 1, 2026 through Hello Internet Corp and is hosted behind Cloudflare’s network (IP 172.67.177.180, located in Canada). The authoritative nameservers brodie.ns.cloudflare.com and natasha.ns.cloudflare.com confirm the use of Cloudflare’s DNS service. The site presented a valid TLS certificate issued by Google Trust Services, indicating that HTTPS connections were properly encrypted. Threat intelligence sources have classified the domain as a generic phishing site; it is currently listed on a single security blocklist and has been blocked by the PhishDestroy sinkhole.

VirusTotal analysis shows that four of ninety‑four AV engines flagged the domain as malicious, providing additional corroboration of its illicit nature. The domain’s online status is reported as offline at the time of this assessment, which may be a deliberate takedown or a temporary outage. No page title, brand target, or specific phishing kit information is available in the current dataset, and the site has not been indexed by public safe‑browsing services.

Defenders should continue to block the IP address 172.67.177.180 and add noircas.com to domain deny‑lists. Ongoing monitoring of Cloudflare‑associated IP ranges and periodic re‑scanning with multi‑engine services are recommended to detect any re‑activation. Organizations that employ email filtering should ensure that URLs pointing to this domain are quarantined, and incident response teams should treat any related communications as suspicious until further forensic evidence is obtained.