VirusTotal
5 / 91
“$NOVA — Claim Rewards”
reward-nova-s2.vercel.app — Letzter bekanntermaßen aktiv (HTTP 200). Betrugstyp: Airdrop Scam. Zusammenfassung der Beweislage: VirusTotal 5/91 (alphaMountain.ai, Forcepoint ThreatSeeker, LevelBlue, PhishFort, VIPRE); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 90/100. Registrar: Vercel.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
On 2026-10-01, reward-nova-s2.vercel.app returned an HTTP 200 status code, a recorded successful response on that date. The same domain was first observed on 2026-09-14, and PhishDestroy's internal listing records it as listed.
VirusTotal checked the domain on 2026-09-28 and reported 5 detections across 91 scanners. MetaMask and SEAL each appear as external blocklists in the record checked on 2026-10-01. The SSL certificate, issued by Google Trust Services / WR1, was scanned on 2026-09-21. The HTTP check on 2026-10-01 resolved to IP address 64.29.17.67, associated with Vercel, Inc in the US.
The VirusTotal figures and the external blocklist names describe separate source observations, each with its own measurement date, so they should be read as distinct records rather than a combined score. The gap between the first observation and the later checks shows the domain has been recorded across more than one date, though the dates alone do not establish what changed. The internal listing and the external blocklist entries reflect different listing sources that a reader can compare side by side.
Anyone reviewing reward-nova-s2.vercel.app should preserve the VirusTotal record and the external blocklist entries as separate items for later comparison. Compare the HTTP response record against the blocklist records to see whether the sources agree or diverge. Retain the PhishDestroy internal listing alongside the external blocklist names so each source can be traced independently.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
VercelAnmerkung des Scanners: alive_content: raw=ok; http=200; via=https_proxy; server=Vercel
Die Edge-IP-Reputation wird dieser Domäne nicht zugeordnet.
Location describes the IP network.
8f46c4a0a289bfde4060d06986f2af761ee62d668dde972e6bef4687ee4f6093Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt