novaelectricidadlaplata[.]com[.]ar

Analysis of novaelectricidadlaplata.com.ar shows a newly created domain (registered June 11, 2026) that is actively being used for generic phishing. The domain was registered through the registrar nicar and resolves to the IPv4 address 23.227.38.65. DNS resolution is served by Cloudflare’s nameservers james.ns.cloudflare.com and magdalena.ns.cloudflare.com, indicating the infrastructure is hosted behind Cloudflare’s edge network.

The domain appears on three external security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the high‑risk classification. VirusTotal reports that the domain was scanned by 91 antivirus engines, none of which flagged the domain at the time of scanning; however, the absence of detections does not constitute a safety assurance. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing status, OTX references, or page title information is currently available.

Consequently, the evidence base consists of registration metadata, IP address, nameserver configuration, blocklist presence, and the multi‑vendor scan result. Defenders should treat the domain as malicious, block network traffic to and from 23.227.38.65, add the domain to internal deny lists, monitor for any future resolution changes, and consider proactive email filtering rules to prevent credential harvesting attempts. Continuous re‑evaluation is advised, as the lack of current detection signatures may change if the threat actor modifies the payload or hosting arrangement.