naovax[.]com

Analysis of naovax.com shows that the domain was registered on 29 December 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 104.21.86.64, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. An SSL certificate identified as “WE1” is present, indicating that HTTPS connections were enabled. The site has been classified as a social‑media phishing operation and was listed in a single security blocklist.

It is also recorded in one AlienVault OTX pulse, confirming that threat‑intel sources have observed malicious activity associated with the domain. Defensive feeds have taken action: PhishDestroy has blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. VirusTotal scans show that 13 of 93 antivirus and URL‑reputation engines flagged the domain as malicious, reinforcing the phishing assessment. The domain’s current status is offline, which suggests the operators have taken the site down, but the infrastructure footprint remains observable.

Uncertainty remains regarding the exact content that was served before takedown, as no page title or content snapshot is available in the intelligence set. Defenders should continue to enforce blocklisting of naovax.com, monitor the underlying IP address for possible reuse, and consider sinkholing the domain if it reappears. In addition, updating endpoint and web‑filter signatures to reflect the observed VirusTotal detections will help prevent user exposure should the site be resurrected.