nova-fx-plus[.]xyz

The domain nova-fx-plus.xyz is a confirmed phishing site engaged in brand impersonation, specifically targeting the cryptocurrency platform 'across'. This site posed an elevated risk by mimicking legitimate services to deceive users into disclosing sensitive information or transferring funds. As of the latest verification, nova-fx-plus.xyz has been taken offline, though it previously operated without a known crypto drainer kit.

Technical indicators confirm the malicious nature of nova-fx-plus.xyz. The domain was flagged by 2 of 95 VirusTotal security vendors, including CRDF and Gridinsoft, which assigned it a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through OwnRegistrar, Inc. on July 01, 2025, the domain resolved to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the US. No SSL certificate was issued, and the observed page title was 'Nova Fx plus Trade Digital Center - Leveraging Artificial Intelligence'. Nameservers were dns1.webproserver.com and dns2.webproserver.com.

Users who interacted with nova-fx-plus.xyz should take immediate safety steps. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts. Report the phishing domain to platforms like Google Safe Browsing, the Anti-Phishing Working Group (APWG), or local cybercrime authorities to aid in takedown efforts and protect others from similar scams.