novablemsecuresystem[.]com

novablemsecuresystem.com is an active domain created on February 21, 2026 and currently hosts a brand‑impersonation page titled “Novablem Secured System”. The site resolves to the IPv4 address 163.61.188.5, which is geolocated to the United States and associated with ASN 153568 (NEW DHAKA HARDWARE). Registration records show the domain was provisioned through Cosmotown, Inc., and the authoritative nameservers dns1.lytehosting.com through dns4.lytehosting.com are in use. The domain is flagged as high risk and appears on at least one public blocklist, with PhishDestroy confirming its malicious status. Network and web‑application analysis reveals a standard TLS certificate issued by Let’s Encrypt (R12) and an HTTP 200 response for the landing page. The page is built with Bootstrap, jQuery, GSAP, OWL Carousel, and loads external assets from jsDelivr; LiteSpeed serves the content and HTTP/3 is enabled. Intelligence from AlienVault OTX cites the domain in nine separate threat pulses, and the Gridinsoft trust score is 0/100, indicating a full lack of trust. VirusTotal reports four out of ninety‑five scanners marking the domain as malicious, reinforcing the suspicion of a cryptocurrency‑related scam. Analysis indicates the operator is attempting to exploit the “across” brand, although the exact target brand is not disclosed in the available data. The combination of low trust scores, multiple threat‑intel references, and active blocklist listings suggests a coordinated impersonation campaign. Defenders should immediately block DNS resolution and HTTP traffic to 163.61.188.5, update intrusion‑detection signatures to include the domain and associated user‑agent strings, and monitor outbound connections for the listed technologies. Continuous re‑evaluation is advised, as additional indicators such as phishing page content or victim reports may emerge.