# PhishDestroy domain threat record: nova-market.trade Content language: English Canonical HTML report: https://phishdestroy.io/domain/nova-market.trade/ Machine-readable companion: https://phishdestroy.io/domain/nova-market.trade/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-25 09:02:39 UTC - Last availability or vendor check: 2026-10-25 12:23:05 UTC - Stored record updated: 2026-10-25 12:23:05 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 216.24.57.1 - Registrar in stored WHOIS data: GoDaddy.com, LLC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-13 15:12:52 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1724b-5d7a-7128-9628-b5781a04ee5a/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/nova-market.trade - Certificate Transparency search: https://crt.sh/?q=%25.nova-market.trade - Web Archive lookup: https://web.archive.org/web/*/https://nova-market.trade/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the site as malicious because it mimics a trading‑platform login page and asks for credentials. The domain was first observed by PhishDestroy on 2026-10-25, 104 days after its registration on 2026-07-13. An HTTP 200 response and the page title “NovaTrade — Online Trading Platform” were recorded on that date. How the scam works Fake trading platforms display a polished interface that invites users to create or log into an account, often promising demo balances or investment returns. Collected email addresses and passwords can be harvested for credential‑stuffing or used to access real accounts and later request unauthorized withdrawals. Evidence VirusTotal scanned the domain on 2026-10-25 and reported 0 detections from 92 engines, while Google Safe Browsing did not flag the URL that day. OTX listed four pulses referencing the domain, and URLScan’s machine‑learning engine marked the capture malicious with a score of 100 despite an overall non‑malicious verdict. PhishDestroy’s internal blocklist includes nova-market.trade and no external blocklists reported it on that date. Infrastructure The domain was registered with GoDaddy.com, LLC on 2026-07-13. The recorded DNS A record pointed to 216.24.57.1, an address associated with ASN 397273 (Render). The site used Cloudflare as a web‑application firewall and presented a TLS certificate from Google Trust Services valid from 2026-09-10 to 2026-12-09; no DNSSEC records were observed. What to do Visitors should avoid entering credentials; if they have already done so, they should change passwords on related accounts and monitor for unauthorized activity. Organizations can block the domain at the perimeter and review logs for connections to the recorded IP address. No wallet‑related actions are required because wallet recommendations are not applicable. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1724b-5d7a-7128-9628-b5781a04ee5a/ Cloudflare Radar report: https://radar.cloudflare.com/scan/614050ea-956f-4afd-84f4-3a544be8b91c Stored capture screenshot: https://i.ibb.co/wZDDdJjf/fdce9b49ae74.png Cloudflare Radar screenshot (2026-10-25T09:38:29Z): https://screenshots.phishdestroy.io/cf/614050ea-956f-4afd-84f4-3a544be8b91c.png URLScan screenshot (2026-10-25T09:04:07Z): https://screenshots.phishdestroy.io/us/01a1724d-7072-768d-9d67-1f0ce59c6b85.png URLScan capture report: https://urlscan.io/result/01a1724d-7072-768d-9d67-1f0ce59c6b85/ VirusTotal report: https://www.virustotal.com/gui/domain/nova-market.trade Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=nova-market.trade Archived copy: https://web.archive.org/web/20261025090459/https://nova-market.trade/login Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-25 09:41:32 UTC ## Stored page captures - Primary capture: https://i.ibb.co/wZDDdJjf/fdce9b49ae74.png Captured: 2026-10-25 09:02:39 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a1724b-5d7a-7128-9628-b5781a04ee5a.png Captured: 2026-10-25 09:02:39 UTC Source report: https://urlscan.io/result/01a1724b-5d7a-7128-9628-b5781a04ee5a/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/614050ea-956f-4afd-84f4-3a544be8b91c.png Captured: 2026-10-25 09:38:29 UTC Source report: https://radar.cloudflare.com/scan/614050ea-956f-4afd-84f4-3a544be8b91c SHA-256: e474a175f992442a69e502e42d7748076f7b37bd4715cf7c03ed2b7ff55231c3 - URLQuery: https://screenshots.phishdestroy.io/uq/493502bb-9d8d-44e3-a818-c1ecaca8edb2.png Source report: https://urlquery.net/report/493502bb-9d8d-44e3-a818-c1ecaca8edb2 SHA-256: d35b2e44f97ad734af1dcb84a13fd0c2b3fa212cb4f40e4eb34032673f29f0ca - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a1724d-7072-768d-9d67-1f0ce59c6b85.png Captured: 2026-10-25 09:04:07 UTC Source report: https://urlscan.io/result/01a1724d-7072-768d-9d67-1f0ce59c6b85/ SHA-256: 8294af7734f55f87ffd9ef2df046cebc5fafca7c582f2d748c69bceb87538066 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-25T09:16:32Z", "uuid": "01a1724b-5d7a-7128-9628-b5781a04ee5a", "scanned_at": "2026-10-25T09:01:50Z", "final_url": "https://nova-market.trade/login", "status": 200, "ip": "216.24.57.1", "ptr": "ip-216-24-57-1.ingress.render.com", "ips": [ "216.24.57.1" ], "asns": [ "397273" ], "countries": [ "US" ], "doc_hash": "89ec1f6ed811263f42fef4cb7273fbe4b5b4733a5f35b94b2f0fb3a518ba549e", "script_hashes": [ "71983023a521be7e13eb57a31f35576d70be3e61c53c9729c5c33bc40a9882c9" ], "globals": [ "__reactRouterVersion" ], "tls": { "san": [ "nova-market.trade" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "nova-market.trade", "protocol": "TLS 1.3", "valid_to": "2026-12-09T19:31:44Z", "valid_from": "2026-09-10T18:31:49Z" }, "domain_age_days": 103, "apex_age_days": 103, "tls_age_days": 44, "tls_valid_days": 90, "requests": 6, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "x-powered-by": "Express" } }, "cf": { "v": 1, "fetched_at": "2026-10-25T09:40:58Z", "uuid": "614050ea-956f-4afd-84f4-3a544be8b91c", "scanned_at": "2026-10-25T09:38:29Z", "final_url": "https://nova-market.trade/login", "status": 200, "history": [ { "url": "https://nova-market.trade/", "status": 200 }, { "url": "https://nova-market.trade/login", "status": 200 } ], "dom_hash": "b355e4e11e3fded5c6af8f4152b3832c4809d9732db8473840699516003b173f", "doc_hash": "47c340e9ad35480a6e4dce6068bd3261e25b7ceca3c68d8422a50785ee4d41d7", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "nova-market.trade", "type": "A", "value": "216.24.57.1" } ], "dnssec_valid": false, "ip": "216.24.57.1", "whois": { "registrar": "GoDaddy.com, LLC", "created": "2026-07-13T17:12:52Z", "updated": "2026-09-11T17:12:55Z", "expires": "2027-07-13T17:12:52Z", "nameservers": [ "ns07.domaincontrol.com", "ns08.domaincontrol.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-25T09:37:23Z", "analysis_at": "2026-10-25T09:21:14Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "GoDaddy.com, LLC", "created": "2026-07-13T17:12:52Z", "expires": "2027-07-13T17:12:52Z", "updated": "2026-09-11T17:12:55Z", "first_seen": "2026-07-13T17:52:04Z", "dns": [ { "ttl": 3600, "type": "MX", "value": "mailstore1.secureserver.net", "priority": 10 }, { "ttl": 3600, "type": "MX", "value": "smtp.secureserver.net", "priority": 0 }, { "ttl": 3600, "type": "A", "value": "216.24.57.1" }, { "ttl": 3600, "type": "NS", "value": "ns08.domaincontrol.com" }, { "ttl": 3600, "type": "TXT", "value": "v=spf1 include:secureserver.net -all" }, { "ttl": 3600, "type": "TXT", "value": "brevo-code:8bbf93b184a8f66a8eaf9fcb8d4d7af7" }, { "ttl": 3600, "type": "NS", "value": "ns07.domaincontrol.com" }, { "ttl": 3600, "type": "SOA", "rname": "dns.jomax.net", "value": "ns07.domaincontrol.com" } ], "dns_at": "2026-10-25T09:26:36Z", "jarm": "27d27d27d00027d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "nova-market.trade" ], "issuer": "Google Trust Services / WE1", "serial": "27c80d3e9bfeddb90ec90616d6b2e178", "sha256": "9fe44c6bafda809ae353f7cc08d83c4485ae1f0e0bf43d351750759823d5e173", "subject": "nova-market.trade", "valid_to": "2026-12-09T19:31:44Z", "valid_from": "2026-09-10T18:31:49Z" }, "whois": { "registrar": "GoDaddy.com, LLC", "registrar_iana_id": "146", "registrar_url": "whois.godaddy.com", "created": "2026-07-13T17:12:52Z", "updated": "2026-09-11T17:12:55Z", "expires": "2027-07-13T17:12:52Z", "status": [ "clientDeleteProhibited", "clientRenewProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns07.domaincontrol.com", "ns08.domaincontrol.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited", "client update prohibited", "client renew prohibited" ], "events": { "expiration": "2027-07-13T17:12:52Z", "last changed": "2026-09-11T17:12:55Z", "registration": "2026-07-13T17:12:52Z", "last update of RDAP database": "2026-10-20T14:33:10Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-25T09:38:58Z", "mail_config": { "mx": [ "smtp.secureserver.net", "mailstore1.secureserver.net" ], "spf": "v=spf1 include:secureserver.net -all", "dkim": [ "brevo1", "brevo2" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 3 }, "caa_records": { "domain": "nova-market.trade" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-25T09:04:57Z", "first": "2026-10-25T09:04:57Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 6752 }, "social_tags": { "title": "NovaTrade — Online Trading Platform", "themeColor": "#0b0f19" }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 660, "tls": 37, "wait": 512, "connect": 19, "download": 0 }, "response_ms": 1228 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 23420, "co2_grams": 0.0009, "cleaner_than": 53 }, "dns_server": { "ns": [ { "ip": "173.201.71.4", "host": "ns08.domaincontrol.com" }, { "ip": "97.74.103.4", "host": "ns07.domaincontrol.com" } ], "zone": "nova-market.trade" }, "location": { "ip": "216.24.57.1", "asn": "397273", "org": "Render", "city": "San Francisco", "country": "US" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "nova-market.trade" }, "dns": { "A": [ "216.24.57.1" ], "MX": [ "{\"exchange\": \"smtp.secureserver.net\", \"priority\": 0}", "{\"exchange\": \"mailstore1.secureserver.net\", \"priority\": 10}" ], "NS": [ "ns08.domaincontrol.com", "ns07.domaincontrol.com" ], "SOA": "{\"nsname\": \"ns07.domaincontrol.com\", \"hostmaster\": \"dns.jomax.net\", \"serial\": 2026071314, \"refresh\": 28800, \"retry\": 7200, \"expire\": 604800, \"minttl\": 600}", "TXT": [ "brevo-code:8bbf93b184a8f66a8eaf9fcb8d4d7af7", "v=spf1 include:secureserver.net -all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "216.24.57.1", "family": 4 }, "redirects": { "chain": [ "https://nova-market.trade" ] }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2026-07-13T17:12:52Z", "updated": "2026-09-11T17:12:55Z", "expires": "2027-07-13T17:12:52Z", "status": [ "clientRenewProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp", "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns07.domaincontrol.com", "ns08.domaincontrol.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8", "x-powered-by": "Express" } } } } ```