novavapoaus[.]com

This domain, novavapoaus.com, is actively engaged in credential harvesting phishing operations targeting users through deceptive login portals. Analysis indicates the site mimics legitimate service interfaces to trick visitors into submitting usernames, passwords, or financial details, which are then exfiltrated to attacker-controlled infrastructure. The page title, Nova-Vapoaus, suggests an attempt to impersonate a brand or service, increasing the likelihood of successful social engineering. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of this domain. The domain was registered on June 22, 2026, through West263 International Limited, a registrar frequently associated with high-risk registrations. It resolves to the IP address 43.110.24.150, which has been linked to other phishing campaigns. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Most notably, 15 out of 95 security vendors on VirusTotal have flagged this domain as malicious, with detections including generic phishing and credential theft categories. Users who have visited novavapoaus.com or entered credentials on the site should take immediate action to mitigate risk. First, reset passwords for any accounts accessed through the domain, prioritizing email, financial, and administrative credentials. Enable multi-factor authentication (MFA) on all critical accounts to prevent unauthorized access. Monitor linked accounts for suspicious activity, such as unauthorized logins or transactions. If financial data was submitted, contact relevant institutions to report potential fraud. Additionally, scan local devices for malware, as phishing sites may deploy secondary payloads. Block the domain and its associated IP (43.110.24.150) at the network level to prevent further exposure.