novatraceintel[.]com

Analysis of the domain novatraceintel.com indicates it was operating as a generic phishing site targeting individuals involved in cryptocurrency or digital asset intelligence. The domain was registered on February 26, 2026, through HOSTINGER operations, UAB, and resolved to the IP address 88.223.85.17, hosted by AS47583 (Hostinger International Limited) in the United States. Infrastructure analysis reveals the domain used nameservers ns1.dns-parking.com and ns2.dns-parking.com, a common indicator of low-cost or disposable hosting setups often associated with phishing campaigns. The page title, 'NovaTraceIntel - Crypto Fund Investigation & Digital Asset Intelligence,' suggests an attempt to impersonate a legitimate crypto investigation or intelligence service, though no specific brand impersonation has been confirmed in available data.

At the time of reporting, the domain was flagged by one security vendor on VirusTotal and appeared on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The absence of an SSL certificate further aligns with typical phishing domain characteristics, as legitimate financial or investigative services would enforce HTTPS. The domain is currently offline, though its prior hosting on a shared infrastructure provider and use of DNS-parking nameservers may indicate a pattern of rapid deployment and takedowns. Defenders should treat this domain as a confirmed phishing indicator, particularly for organizations or individuals in the cryptocurrency sector.

Network-level blocking of the IP 88.223.85.17 and associated nameservers is recommended, alongside monitoring for similar domains registered through the same registrar or hosting provider. The exact content and functionality of the site remain unanalyzed, so additional payloads or social engineering tactics cannot be ruled out.