fxnovus[.]co
“403forbidden - FXNovus”
fxnovus.co — Não verificado. Tipo de golpe: Fake Exchange. Resumo das evidências: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of the domain fxnovus.co indicates it was registered on February 21, 2026, and has been flagged as a generic phishing site targeting users of the FXNovus trading platform. As of July 24, 2026, the domain resolves to the IP address 172.66.40.90, hosted on Cloudflare's network (AS13335) in the United States. The domain's nameservers are configured as destiny.ns.cloudflare.com and chris.ns.cloudflare.com, which is consistent with Cloudflare's infrastructure. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority for both legitimate and malicious sites. The domain is currently offline, returning a 403 Forbidden HTTP status with the page title '403forbidden - FXNovus,' which explicitly references the FXNovus brand.
This suggests the site was designed to impersonate FXNovus, though the exact content and functionality of the phishing pages remain unconfirmed due to its offline status. Technology detection tools identified WordPress, MySQL, PHP, Yoast SEO, Amazon Web Services, Zendesk, reCAPTCHA, and OneSignal, indicating a relatively sophisticated setup often associated with credential harvesting or fraudulent financial platforms. The domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal reports that one of ninety-three security vendors flags fxnovus.co as malicious.
While this detection count is low, it aligns with the domain's recent registration and offline status, which may limit visibility to security vendors. Defenders should treat this domain as a confirmed phishing threat targeting FXNovus users, particularly given the explicit brand reference in the page title. Network-level blocking of 172.66.40.90 and monitoring for related domains using similar naming conventions or Cloudflare hosting is recommended. Further investigation into the domain's historical content, if recoverable, could clarify the specific phishing mechanisms employed.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 13 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Cloud computing platform offering compute, storage, and networking services.
Customer support ticketing platform.
Google's bot-challenge service. On phishing sites, used to appear legitimate and filter out automated scanners.
Plugin to detect and restore deprecated jQuery features.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Icon font library.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of fxnovus.co · checked Mar 2, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo