nvmp11[.]live
“Nova”
Ringkasan bukti
Analysis of the domain nvmp11.live, created on March 12, 2026, indicates that it is currently offline but was previously identified as part of a generic phishing campaign. The domain resolves to the IP address 104.21.91.206, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. Hosting is provided through Cloudflare, as evidenced by the authoritative nameservers alexia.ns.cloudflare.com and leo.ns.cloudflare.com. No TLS certificate was observed for the site, implying that HTTPS was not configured at the time of capture. The page title returned by the server was "Nova," but no further content analysis is available because the site is no longer reachable.
Reputation checks show that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scans recorded two positive detections out of ninety‑four security vendors, reinforcing the suspicion of malicious intent. The limited detection count suggests that the domain may have been short‑lived or that broader awareness has not yet been achieved.
Defenders should consider the domain malicious and add it to local blocklists, enforce DNS filtering, and monitor for any residual traffic to the associated Cloudflare IP. Given the lack of an SSL certificate and the offline status, any active exploitation is likely concluded, but the infrastructure could be repurposed for future campaigns. Continuous observation of the IP address and related Cloudflare assets is advised to detect potential reuse.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | hcaptcha.com/1/api.js?render=explicit&onload=_hcaptchaonload&hl=ru&sentry=true |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | newassets.hcaptcha.com/c/2a873a865fc844ccfaadea4e3a15ffa39bd4c46d10706177b71683b2b9d8cedf/hsw.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | newassets.hcaptcha.com/captcha/v1/5ea3feff9cf1292d7051510930d98c4719f64575/static/hcaptcha.html#frame=challenge&id=029vk0uzdsoj&host=nvmp11.live&sentry=true&reportapi=https%3a%2f%2faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=ru&tplinks=on |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | newassets.hcaptcha.com/captcha/v1/5ea3feff9cf1292d7051510930d98c4719f64575/static/hcaptcha.html#frame=checkbox&id=029vk0uzdsoj&host=nvmp11.live&sentry=true&reportapi=https%3a%2f%2faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=ru&tplinks=on& |
audit | Hunting_JS_WebAssembly |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 10/08/2026
Linimasa deteksi
-
VirusTotal
0 → 1
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of nvmp11.live · checked Mar 12, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive