nvnew31[.]live

PhishDestroy has identified nvnew31.live as a generic phishing domain with an elevated risk level. This domain was designed to impersonate Nova, as indicated by its page title 'Nova - источник наслаждения,' and likely aims to steal user credentials or personal information through deceptive tactics. The domain is currently offline, but its recent activity posed a credible threat to users who may have encountered it.

Technical analysis reveals that nvnew31.live was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on January 23, 2026, and resolved to IP address 104.21.27.58. It appears on one security blocklist, and VirusTotal flagged it with a detection rate of 6 out of 95 security vendors. The domain lacked an SSL certificate, further indicating its malicious intent. These indicators collectively point to a well-structured phishing campaign targeting Nova users.

To mitigate risks, users should avoid visiting unverified links and always verify URLs through PhishDestroy before interacting with them. If any credentials were entered on this domain, immediate password changes and enabling two-factor authentication on affected accounts are strongly recommended. Reporting the domain to security teams and monitoring for suspicious activity can help prevent further compromise.