# novaforgood.xyz — SUSPICIOUS

> PhishDestroy warns that novaforgood.xyz is a live crypto drainer posing as a donation site. VirusTotal flags 2/95 vendors—verify before you click.

## Summary
PhishDestroy identifies novaforgood.xyz as an active crypto drainer campaign targeting unsuspecting donors. The domain resolves to 216.198.79.1 and was created on September 14, 2025—merely days ago—indicating a fast-turnaround scam designed to evade traditional blocklists. Registered through NAMECHEAP INC under a Let’s Encrypt SSL certificate, this domain appears superficially legitimate but is already flagged by only 2 of 95 VirusTotal security vendors, suggesting widespread evasion of automated detection systems.

Technical indicators reveal this domain functions as a cryptocurrency drainer, luring victims with a facade of charitable giving. The recent domain registration date, combined with low vendor detection, points to a newly deployed threat deliberately structured to bypass early-stage security filters. The presence of a valid SSL certificate further enhances credibility, increasing the likelihood of user engagement and successful fund extraction.

If you visited novaforgood.xyz, immediately disconnect from the site, revoke any connected wallet permissions, and transfer remaining assets to a clean wallet. Scan all devices with updated antivirus software and monitor blockchain transactions for signs of unauthorized transfers. Report the domain to PhishDestroy for takedown and warn others—detection is critical given its minimal footprint on security platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-09-14 05:23:18
- Registrar: NAMECHEAP INC
- IP: 216.198.79.1

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3d88495a-252a-4e11-82b0-e566da826223
- PhishDestroy: https://phishdestroy.io/domain/novaforgood.xyz/
- LLM endpoint: https://phishdestroy.io/domain/novaforgood.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/novaforgood.xyz/
Last updated: 2026-03-22