financialnova[.]net

The domain financialnova.net was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolved to the IP address 172.67.142.99, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The authoritative nameservers bill.ns.cloudflare.com and meiling.ns.cloudflare.com indicate that the domain leveraged Cloudflare’s DNS and CDN services. No TLS certificate was observed for the site, suggesting that HTTPS was not configured at the time of analysis.

The site’s HTTP response returned an offline status, and the page title captured prior to takedown was "Nova Finance," confirming a generic financial‑themed phishing lure. VirusTotal scans recorded two positive detections out of ninety‑three submitted security vendors, indicating limited but notable malicious interest. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation service.

The elevated risk rating reflects the combination of recent creation, use of reputable hosting infrastructure, and the presence of detections. Defenders should continue to block the associated IP address and the domain name at perimeter and DNS filtering layers, monitor for re‑registration or related subdomains, and consider adding the domain to internal threat intelligence feeds. Ongoing observation of Cloudflare‑hosted assets linked to the same IP may reveal additional phishing infrastructure.