# PhishDestroy domain threat record: nvmp47.live Content language: English Canonical HTML report: https://phishdestroy.io/domain/nvmp47.live/ Machine-readable companion: https://phishdestroy.io/domain/nvmp47.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-26 20:28:17 UTC - Last availability or vendor check: 2026-10-26 20:32:41 UTC - Stored record updated: 2026-10-26 21:02:54 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 37.228.129.32 - Registrar in stored WHOIS data: NameCheap, Inc. - Last stored HTTP status: 302 - Registration date in stored WHOIS data: 2026-09-05 12:00:56 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a179e9-4a52-7088-9e69-3a75813f7c82/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/nvmp47.live - Certificate Transparency search: https://crt.sh/?q=%25.nvmp47.live - Web Archive lookup: https://web.archive.org/web/*/https://nvmp47.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/7xH9mCNG/11cce32e9bde.png Captured: 2026-10-26 20:32:41 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a179e9-4a52-7088-9e69-3a75813f7c82.png Captured: 2026-10-26 20:32:41 UTC Source report: https://urlscan.io/result/01a179e9-4a52-7088-9e69-3a75813f7c82/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a11b06-bb6a-737b-8549-5144b182ae1e.png Captured: 2026-10-26 20:28:17 UTC Source report: https://urlscan.io/result/01a179e9-4a52-7088-9e69-3a75813f7c82/ - URLScan · 2026-10-08: https://screenshots.phishdestroy.io/us/01a11b04-bac1-71e6-bd49-75fbf1007726.png Captured: 2026-10-08 10:17:49 UTC Source report: https://urlscan.io/result/01a11b04-bac1-71e6-bd49-75fbf1007726/ SHA-256: dbb5ff4cd160986abd5755b415ef183bc9a34d5c334508542b4eec5543edb986 - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179e6-516a-76fd-bd58-6e66a1eb00fc.png Captured: 2026-10-26 20:28:35 UTC Source report: https://urlscan.io/result/01a179e6-516a-76fd-bd58-6e66a1eb00fc/ SHA-256: dbb5ff4cd160986abd5755b415ef183bc9a34d5c334508542b4eec5543edb986 - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179e8-916c-703d-981e-92e9c9f9002a.png Captured: 2026-10-26 20:30:59 UTC Source report: https://urlscan.io/result/01a179e8-916c-703d-981e-92e9c9f9002a/ SHA-256: dbb5ff4cd160986abd5755b415ef183bc9a34d5c334508542b4eec5543edb986 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/30a7316c-d036-4f2d-9832-3d3671909aea.png Captured: 2026-10-26 20:28:48 UTC Source report: https://radar.cloudflare.com/scan/30a7316c-d036-4f2d-9832-3d3671909aea SHA-256: 9e53d0005517051d2a71fc4ee77e1b8ffe2c9485b56322e1e19fb23393bd0cf3 - URLQuery: https://screenshots.phishdestroy.io/uq/51f4b0a6-0dff-41cd-acca-03b2c499657f.png Source report: https://urlquery.net/report/51f4b0a6-0dff-41cd-acca-03b2c499657f SHA-256: 0e8c371874373383d3562e6c81d6921f02220ce06e795ae1df5dfd7ff90e15d6 - URLScan · 2026-10-08: https://screenshots.phishdestroy.io/us/01a11b06-bb6a-737b-8549-5144b182ae1e.png Captured: 2026-10-08 10:20:06 UTC Source report: https://urlscan.io/result/01a11b06-bb6a-737b-8549-5144b182ae1e/ SHA-256: dbb5ff4cd160986abd5755b415ef183bc9a34d5c334508542b4eec5543edb986 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T21:03:34Z", "uuid": "01a179e9-4a52-7088-9e69-3a75813f7c82", "scanned_at": "2026-10-26T20:31:47Z", "final_url": "https://nvmp47.live/session/login", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://nvmp47.live/", "from": "http://nvmp47.live/", "status": 307 }, { "to": "https://nvmp47.live/session/login", "from": "https://nvmp47.live/", "status": 302 } ], "ip": "37.228.129.32", "domains": [ "newassets.hcaptcha.com", "cdn.jsdelivr.net", "fonts.gstatic.com", "api.hcaptcha.com", "d396b1711d86.w.hcaptcha.com", "9cc1d326b312.w.hcaptcha.com", "hcaptcha.com", "cdnjs.cloudflare.com", "cdn.materialdesignicons.com" ], "ips": [ "2606:4700::6812:dcd", "104.19.229.21", "2606:4700::6812:ccd", "104.19.230.21", "142.250.154.94", "2606:4700::6811:190e", "2400:52e0:1e00:2::1334:1", "2606:4700::6811:d005", "37.228.129.32" ], "asns": [ "13335", "15169", "60068", "200651" ], "countries": [ "US", "DE", "FI" ], "link_domains": [ "www.hcaptcha.com", "hcaptcha.com" ], "doc_hash": "0790bf1550a5095bfe0de4287f1ead1ea2e3746dd9b037023efdbb2c7db24973", "script_hashes": [ "89a574824215075b5392730f04d2afa3fef7d8992311deb5ff3ea1975f7ee3bd", "403e3ad4baae3a293368186c2385915471cc47b34913d678ee608eb574491d85", "97b099180cfc81ff72681436438030c35d434fa98d291a99e85df56ccad8a8fb", "ee2d8cf7188c1ede46501e42998dc60a2b7813fb8cc1f312fd021786c3b4f9db", "440c3c6315cbd894d58f86db612e645dbdf5dde87e6f07116a9eb44425649bbb", "a540353092f333a26f82531f2b7d33b368e2ff8aa0ee2fa203fee0f06ffed737", "66a67879e3f8ac9f2dcb42f6e3b3b7beaa4ad410f0f03596eb3deb72fe3e1a8c", "b3b5e0018a61e060b8310ad144c11026b1997590102816179e13a6e47934ef32", "e613b3ecfd7835852af7c08c1c83e73e8adc854c5cbfc1cb491c38221aadbd00", "233f9b2488e57d9aac384ca1df42932ee5412fd754d415f6836bd62297013dfc" ], "globals": [ "Telegram", "TelegramGameProxy_receiveEvent", "TelegramGameProxy", "webpackJsonp", "core", "global", "System", "asap", "setImmediate", "clearImmediate", "regeneratorRuntime", "_babelPolyfill", "Color", "Chart", "AmCharts", "_hcaptchaOnLoad", "Raven", "hcaptcha", "grecaptcha" ], "cookies": [ "connect.sid", "__cf_bm" ], "storage_keys": [ "__telegram__initParams" ], "tls": { "san": [ "nvmp47.live", "www.nvmp47.live" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "nvmp47.live", "protocol": "TLS 1.3", "valid_to": "2026-12-05T03:12:45Z", "valid_from": "2026-09-06T03:12:46Z" }, "domain_age_days": 50, "apex_age_days": 50, "tls_age_days": 50, "tls_valid_days": 89, "requests": 195, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.18.0 (Ubuntu)", "content-type": "text/html; charset=utf-8", "x-powered-by": "Express" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T20:29:18Z", "uuid": "30a7316c-d036-4f2d-9832-3d3671909aea", "scanned_at": "2026-10-26T20:28:48Z", "final_url": "https://nvmp47.live/session/login", "status": 200, "redirected": "same-domain", "history": [ { "url": "https://nvmp47.live/", "status": 302 }, { "url": "https://nvmp47.live/session/login", "status": 200 } ], "dom_hash": "f2d0af0e232b7f881fe24efd6237b0ca2ea2ff2995ff123752013da2a8b48735", "doc_hash": "0790bf1550a5095bfe0de4287f1ead1ea2e3746dd9b037023efdbb2c7db24973", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "nvmp47.live", "type": "A", "value": "37.228.129.32" } ], "dnssec_valid": false, "ip": "37.228.129.32", "whois": { "registrar": "NameCheap, Inc.", "created": "2026-09-05T14:00:56Z", "updated": "2026-09-10T14:00:56Z", "expires": "2027-09-05T14:00:56Z", "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T21:02:31Z", "analysis_at": "2026-10-26T20:32:23Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 0, "suspicious": 0, "undetected": 36 }, "reputation": 0, "tags": [ "dga" ], "first_seen": "2026-09-06T04:29:09Z", "dns": [ { "ttl": 1800, "type": "MX", "value": "eforward5.registrar-servers.com", "priority": 20 }, { "ttl": 1800, "type": "MX", "value": "eforward3.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "NS", "value": "dns2.registrar-servers.com" }, { "ttl": 1799, "type": "A", "value": "37.228.129.32" }, { "ttl": 1800, "type": "NS", "value": "dns1.registrar-servers.com" }, { "ttl": 3601, "type": "SOA", "rname": "hostmaster.registrar-servers.com", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "MX", "value": "eforward2.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward1.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward4.registrar-servers.com", "priority": 15 }, { "ttl": 1800, "type": "TXT", "value": "v=spf1 include:spf.efwd.registrar-servers.com ~all" } ], "dns_at": "2026-10-26T20:32:46Z", "jarm": "15d3fd16d29d29d00042d43d000000fe02290512647416dcf0a400ccbc0b6b", "cert": { "san": [ "nvmp47.live", "www.nvmp47.live" ], "issuer": "Let's Encrypt / YR2", "serial": "6a3d9fc9a4a07eaa14057ed024728b6fa15", "sha256": "3fc47bafec8571399fab9ba103ceddb7be7e650b556ece5c0b6a0cf0422791c8", "subject": "nvmp47.live", "valid_to": "2026-12-05T03:12:45Z", "valid_from": "2026-09-06T03:12:46Z" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "registration": "2026-09-05T14:00:56Z", "registrar expiration": "2027-09-05T14:00:56Z", "last update of RDAP database": "2026-10-25T20:29:55Z" }, "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T20:29:40Z", "mail_config": { "mx": [ "eforward4.registrar-servers.com", "eforward5.registrar-servers.com", "eforward1.registrar-servers.com", "eforward2.registrar-servers.com", "eforward3.registrar-servers.com" ], "spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all", "spf_lookups": 1 }, "caa_records": { "domain": "nvmp47.live" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "social_tags": { "title": "Nova" }, "trackers": { "requests": 192, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 }, { "name": "hCaptcha", "company": "Intuition Machines", "country": "US", "category": "Utilities", "requests": 11 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 302, "timings": { "dns": 38, "tls": 38, "wait": 40, "connect": 37, "download": 0 }, "response_ms": 153 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443, 8080 ] }, "carbon": { "bytes": 21854, "co2_grams": 0.0008, "cleaner_than": 55 }, "dns_server": { "ns": [ { "ip": "156.154.132.200", "host": "dns1.registrar-servers.com" }, { "ip": "156.154.133.200", "host": "dns2.registrar-servers.com" } ], "zone": "nvmp47.live" }, "cookies": { "cookies": [ { "name": "connect.sid", "http_only": true }, { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "37.228.129.32", "asn": "200651", "org": "FlokiNET ehf", "city": "Frankfurt am Main", "country": "DE" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "nvmp47.live" }, "dns": { "A": [ "37.228.129.32" ], "MX": [ "{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}", "{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}", "{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}" ], "NS": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ], "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1790876514, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}", "TXT": [ "v=spf1 include:spf.efwd.registrar-servers.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "37.228.129.32", "family": 4 }, "redirects": { "chain": [ "https://nvmp47.live", "/session/login?redirect=%2Fmarketplace" ], "count": 1 }, "subdomains": { "count": 1, "subdomains": [ "www.nvmp47.live" ] }, "tech_stack": { "technologies": [ "Node.js", "Chart.js", "amCharts", "Ubuntu", "Material Design Lite", "Vuetify", "Vue.js", "Nginx", "Express", "Cloudflare", "Lodash", "hCaptcha", "core-js", "jsDelivr", "cdnjs", "Webpack", "Babel" ] }, "headers": { "headers": { "server": "nginx/1.18.0 (Ubuntu)", "content-type": "text/html; charset=utf-8", "x-powered-by": "Express" } } } } ```