otcnova[.]com

This domain is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate over-the-counter trading platforms, tricking visitors into submitting sensitive account credentials, personal information, or financial details. The fraudulent nature of the site is designed to harvest data for unauthorized access or financial fraud, posing a direct risk to user security and privacy. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain otcnova.com was registered on May 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is linked to other suspicious activities. Security vendors on VirusTotal flagged the domain, with 5 out of 95 engines detecting it as malicious. Additionally, the domain appears on two security blocklists, further corroborating its classification as a phishing threat. The site employs technologies such as Node.js, Vue.js, and Nuxt.js, alongside Cloudflare services, to evade detection and enhance its legitimacy facade. Users who visited otcnova.com or entered credentials on the site should take immediate action to mitigate risks. First, revoke any submitted credentials by changing passwords for associated accounts, particularly those related to financial or email services. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized transactions or suspicious activity, and report any anomalies to the respective service providers. If financial information was disclosed, contact the relevant institution to initiate fraud protection measures. Finally, scan local devices for malware or unauthorized access, as phishing sites may deploy additional payloads to compromise user systems.