novabank[.]gate-cryptolist[.]com

The domain novabank.gate-cryptolist.com was registered on June 17, 2024 through Key-Systems GmbH. It resolves to the IP address 188.114.97.3 and is served by Cloudflare nameservers (dale.ns.cloudflare.com, vera.ns.cloudflare.com). VirusTotal has recorded 13 detections out of 91 scanned security vendors, indicating that a subset of scanners classify the site as malicious. The domain appears on one public blocklist and is actively blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has observed malicious activity linked to it.

No further public intelligence such as Safe Browsing verdicts, OTX mentions, SSL certificate details, HTTP response codes, or page‑title metadata is present in the supplied data. As a result, the exact payload, credential‑harvesting techniques, or targeted brand cannot be verified from the current evidence. The combination of multiple VirusTotal detections, blocklist inclusion, and active blocking raises the risk assessment to elevated.

Defenders should add the domain to outbound and inbound filtering policies, monitor DNS queries for the A record 188.114.97.3, and ensure that any connections to Cloudflare‑served content for this host are logged and examined. Continuous re‑scanning with multi‑engine services is recommended to capture any evolution in the threat profile. Organizations should also alert users to the suspicious domain, particularly if unsolicited communications reference “NovaBank” or related financial services, and enforce multi‑factor authentication to mitigate potential credential compromise.