nova-inviolex[.]net

Analysis indicates that nova-inviolex.net was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on 21 February 2026. The domain is currently taken offline, but its DNS configuration points to Cloudflare nameservers anastasia.ns.cloudflare.com and george.ns.cloudflare.com, resolving to IP address 104.21.5.99, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL/TLS certificate is presented for the host, meaning HTTPS connections cannot be established securely. The only observed HTTP response includes a page title of “about:privatebrowsing”, which does not reveal any functional payload.

Gridinsoft assigns a trust score of 0 out of 100, indicating maximal suspicion. VirusTotal reports that 12 of 93 scanned security vendors flagged the domain, confirming malicious detection across multiple engines. The domain is listed on three public blocklists—PhishDestroy, MetaMask, and SEAL—further corroborating its classification as a phishing infrastructure. The combination of a newly created domain, lack of encryption, low trust score, multiple vendor detections, and blocklist listings aligns with the reported generic phishing threat type and the high risk rating.

Because the site is offline, active payload observation is not possible, leaving the exact content of the landing page uncertain. Defenders should continue to block the domain and its resolving IP at network perimeters, add the host to local deny lists, and monitor for any re‑activation or reuse of the associated Cloudflare IP range. Ongoing telemetry collection from DNS queries and any future re‑hosting attempts is recommended to maintain visibility.