novaxva-redirects[.]pages[.]dev

PhishDestroy identifies novaxva-redirects.pages.dev as a high-risk generic phishing domain that is currently active. This domain is designed to imitate legitimate services to trick users into divulging sensitive information such as login credentials or financial details. The threat is classified as generic_phishing, meaning it does not target a specific brand but may use various lures.

Technical indicators include: VirusTotal detection rate of 1/95 security vendors, indicating low but notable malicious flagging. The domain is registered through Cloudflare, Inc., and resolves to IP address 188.114.96.3. SSL certificate is issued by Google Trust Services (WE1), which may lend a false sense of legitimacy. The domain uses Cloudflare's DNS and proxy services, complicating takedown efforts. No blocklist or trust score data is available beyond the VT detection.

Mitigation steps: Users should never click links or submit data on this domain. Organizations should block the domain and IP at the network level, add to web filtering blacklists, and monitor for related phishing campaigns. Report the domain to Cloudflare and Google Safe Browsing. Use security awareness training to help users recognize phishing attempts. Regularly scan for compromised credentials that may have been exposed through similar domains.