# en.novaspringsave.pro — SUSPICIOUS

> Domain en.novaspringsave.pro impersonates Aave to steal credentials. This active campaign uses Let's Encrypt SSL and is flagged by 1/95 VirusTotal vendors.

## Summary
PhishDestroy identifies en.novaspringsave.pro as an active brand impersonation phishing campaign targeting Aave users. This elevated-risk domain masquerades as the legitimate Aave platform to harvest login credentials or financial data from unsuspecting victims.

This domain was flagged by 1 out of 95 VirusTotal security vendors. It resolves to IP 147.93.73.139 and utilizes a Let's Encrypt SSL certificate. Additional metadata such as registrar, creation date, and blocklist status is currently unavailable. The low detection rate suggests this campaign may be newly launched or deliberately evasive.

Users should avoid interacting with en.novaspringsave.pro or any suspicious links purportedly related to Aave. Verify URLs by cross-referencing official Aave channels (aave.com) or using phishing detection tools. Deploy email filtering to block impersonation attempts and enable multi-factor authentication on all financial accounts. Report any observed activity to Aave's security team or your organization's threat intelligence platform for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Aave

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 147.93.73.139

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a091332b-e989-4f97-b47b-eb6e0d74a395
- PhishDestroy: https://phishdestroy.io/domain/en.novaspringsave.pro/
- LLM endpoint: https://phishdestroy.io/domain/en.novaspringsave.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en.novaspringsave.pro/
Last updated: 2026-03-21