novisdrop[.]com

This domain is identified as a credential harvesting phishing site designed to deceive users into submitting sensitive login credentials, financial details, or personal information. Analysis indicates the infrastructure was specifically engineered to mimic legitimate services, likely targeting unsuspecting victims through email campaigns, social engineering, or malvertising. The domain’s design and behavior align with known phishing tactics, including the use of obfuscated scripts and fake login portals to capture user input in real time. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain resolves to the IP address 188.114.96.3 and is registered through Hello Internet Corp, a registrar frequently associated with abusive domains. It was created on April 08, 2026, suggesting a short operational lifespan typical of phishing campaigns. Security vendors have flagged this domain in 12 out of 95 VirusTotal scans, while it appears on one security blocklist and has been documented in a single AlienVault OTX threat intelligence pulse. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. Users who visited novisdrop.com should immediately revoke any credentials entered on the site, particularly if they resemble login portals for banking, email, or social media services. Monitor financial accounts for unauthorized transactions and enable multi-factor authentication on all critical accounts. If the domain was accessed via a corporate device, report the incident to internal security teams for forensic analysis. Browser caches and saved passwords should be cleared to eliminate residual session tokens. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts targeting the same credentials.