novaxchange[.]live

This domain, novaxchange.live, poses a specific brand impersonation threat by masquerading as a forex and stock broker under the title 'Novaxchange - Forex and Stock Broker' while targeting the DHL brand. Analysis indicates the domain is designed for social engineering attacks, as evidenced by Google Safe Browsing flags for SOCIAL_ENGINEERING. The domain's risk level is high, and it is currently offline, but its infrastructure suggests active misuse for credential harvesting or fraudulent schemes.

Technical indicators provide concrete evidence of malicious intent. VirusTotal data shows 13 out of 95 security vendors flag this domain, a significant detection rate. The domain appears on 2 security blocklists, including PhishDestroy and InversionDNS. Infrastructure analysis reveals it resolves to IP address 172.67.152.144 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu on January 28, 2025. The Gridinsoft trust score is 0 out of 100, confirming a high-risk profile. These exact numbers underscore the domain's verified threat status.

Users who have visited novaxchange.live should immediately run a full antivirus scan on their devices and monitor financial accounts for unauthorized activity. Change passwords for any accounts accessed while browsing the domain, especially those related to DHL or financial services. Enable two-factor authentication where possible and report any suspicious transactions to relevant authorities. Avoid interacting with any emails or links referencing this domain, as further phishing attempts may follow.