ibs[.]novatrustmobile[.]com

Analysis indicates that the domain ibs.novatrustmobile.com was flagged as a generic phishing site with elevated risk. As of July 24, 2026, the domain is offline, though it was previously active and resolved to the IP address 104.21.31.46, hosted on Cloudflare's infrastructure (AS13335). The domain was registered on October 18, 2025, through Dynadot LLC and uses Cloudflare nameservers (carlos.ns.cloudflare.com and faye.ns.cloudflare.com). No SSL certificate was detected during scans, and the page title returned was 'Nur einen Moment…', a generic placeholder commonly associated with intermediary or cloaked phishing pages.

Detection data is limited but notable: one security vendor on VirusTotal flagged the domain as malicious, and it appears on a single security blocklist, specifically PhishDestroy. The Gridinsoft trust score of 0/100 further corroborates its suspicious nature. While the domain is currently offline, its infrastructure—particularly the use of Cloudflare—aligns with patterns observed in phishing campaigns that leverage CDN services to obscure origin servers and evade detection. The absence of an SSL certificate is unusual for legitimate services but consistent with low-effort or hastily deployed phishing sites.

Defenders should treat this domain as compromised infrastructure. Although no brand impersonation or specific scam type is confirmed from the available data, the combination of a low detection count, Cloudflare hosting, and a placeholder page title suggests it may have been part of a larger, short-lived phishing operation. Network-level blocking of 104.21.31.46 and monitoring for re-registration or re-emergence under similar nameservers is recommended. Further analysis of historical DNS records or SSL certificate transparency logs may provide additional context, though such data is not currently available in the provided intelligence.