novusolutions[.]com[.]co

This domain, novusolutions.com.co, is identified as a brand_impersonation phishing site targeting Google. The page title, 'NovuSolutions | Maquinaria Industrial,' does not align with Google's legitimate services, suggesting an attempt to deceive users into believing the site is affiliated with the targeted brand. No specific drainer kit signatures were observed, but the mismatch between branding and content indicates a likely credential harvesting or fraudulent scheme. Analysis reveals the following technical indicators: the domain is flagged by 18 out of 95 security vendors on VirusTotal, registered through Cloudflare, Inc. on September 20, 2025, and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1), which may lend a false sense of legitimacy. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and was not listed on Google Safe Browsing at the time of analysis. The domain is currently offline, likely due to takedown actions or infrastructure suspension. However, the remaining risk includes potential reuse of the domain or migration of the phishing campaign to alternative infrastructure. Organizations should monitor for re-registration or similar domains leveraging the same brand impersonation tactics. Network defenders are advised to block the domain and associated IP address, while users should verify the legitimacy of any communication claiming affiliation with Google through official channels.