novadax[.]org

Analysis of the domain novadax.org indicates that it was registered on February 22, 2026 through NiceNIC International Group Co., Limited and is hosted on the network owned by Ultahost, Inc. (AS214036) in the Netherlands. DNS resolution points to the singular address 192.142.10.183, which is consistent with the hosting provider’s allocation. The domain presents no SSL certificate, meaning communications occur over plain HTTP and lack transport‑layer encryption, a characteristic often observed in phishing infrastructure. The only visible page element recorded is a generic title of "Home," providing no insight into the intended victim‑targeted content.

VirusTotal observations show that two out of ninety‑five scanning engines have flagged the domain, reinforcing the suspicion of malicious use. Defensive services have already taken action: PhishDestroy reports the site as taken offline, and the domain appears on one security blocklist, indicating that at least one anti‑phishing feed has incorporated it. Nameserver configuration uses Cloudflare’s authoritative servers (coen.ns.cloudflare.com and sreeni.ns.cloudflare.com), a common choice for fast‑changing malicious sites.

While the exact phishing campaign details remain unconfirmed, the combination of recent registration, lack of TLS, flagged detections, and rapid takedown suggests a purposeful, short‑lived phishing operation. Defenders should immediately block the domain and the associated IP address at perimeter defenses, monitor for any residual traffic, and consider adding the domain to internal blacklists. Ongoing observation of the hosting ASN and related sub‑domains is advised to detect potential re‑use of the same infrastructure for future malicious campaigns.