Verdict
nova-client.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Product page for Nova Client v1.21.11: a free Fabric PvP Minecraft client distributed as a single .jar, listing 70+ modules, features, compatibility, download link, setup steps, gallery, and FAQ. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 6 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 2013Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2013.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Nova Client is a software-download website presenting a free Fabric-based PvP Minecraft client, version 1.21.11, with a single-JAR installation, more than 70 listed modules, compatibility information, setup instructions, screenshots, a release archive, and an FAQ. Its apparent business model is community distribution of game-modification software, with no explicit monetization stated on the page.
Scam/Impersonation Risk
The site presents as a software download page rather than a financial or credential-collection service, and the captured page showed no login form, sensitive form, wallet connection, or external submission activity. However, this benign page presentation does not offset the materially adverse external reputation evidence: the domain is confirmed as blacklisted, with 14 malicious and 3 suspicious detections across evaluated security services. The downloadable single JAR and features such as AutoTotem, automated anchor sequences, AutoReconnect, SilentHomeSetter, and other competitive-play automation increase the consequence of executing the software, particularly because the operator identity is not independently verified. The available evidence supports a critical interaction-risk posture, although it does not establish that the site is impersonating a named brand or that the software is malicious by itself.
- The homepage describes Nova Client v1.21.11 as a free Fabric PvP Minecraft client distributed through a direct single-JAR download, with more than 70 modules.
- The homepage lists automation-oriented functions including AutoTotem, DoubleAnchor, AnchorMacro, AutoReconnect, and SilentHomeSetter.
- External reputation telemetry records 14 malicious detections and 3 suspicious detections; the domain is also recorded as blacklisted.
- The current registration record states: registered 2026 (~0.51 years old), with creation date 2026-03-15T15:18:48Z.
Regulatory Verification Notes
The website is presented as a game-modification software service, not as a regulated financial product. Its available page content does not identify a legal operator, licensing authority, registration number, or independently verifiable corporate affiliation; the real-world operator therefore remains unverified. The historical record also requires care: captures associated with the domain extend back to 2013 while the current registration record dates to 2026, so continuity between the historical domain record and the present operator cannot be established from the supplied evidence. This is a provenance and disclosure issue, not proof of a regulatory violation. A low authority footprint and absent structured site metadata provide limited independent support for the site's identity claims.
- The homepage identifies the product and version but does not provide a legal entity, corporate registration, or licensing reference.
- Historical records show 55 archive snapshots, with captures spanning 2013–2026.
- The site's transport certificate is DV-validated, issued by YE2, and valid until 2026-12-16T17:48:52+00:00.
- The domain registrar is Web Commerce Communications Limited dba WebNic.cc.
What to Verify Next
Before any download or execution, an enterprise or individual should obtain the client through a separately verified official distribution channel and validate the JAR's cryptographic hash and code provenance using an independently authenticated source. The operator's identity should be confirmed through an offline or independently sourced contact route, and any claimed affiliation with Minecraft communities, developers, or distribution platforms should be checked directly with those parties. The download should also be assessed in an isolated environment using current endpoint and malware-analysis controls, with no access to personal credentials, sensitive files, or production systems.
- The homepage supplies direct download and setup instructions but no independently authenticated software-signing or hash information.
- The FAQ and support references are presented within the site rather than through an independently verified organizational channel.
- Behavioral observation recorded no login form, hidden sensitive form, wallet connection, clipboard hijacking, or external POST activity.
Summary Verdict
The website has a critical trust posture for interaction and software acquisition. Its clear product presentation and absence of observed credential-collection behavior are outweighed by confirmed blacklist status, substantial malicious detections, unresolved operator identity, and uncertain provenance continuity. Sensitive interaction and execution of the downloaded software are not supported by the available evidence.
Infrastructure Integrity
The site is fronted by Cloudflare CDN/WAF infrastructure, which limits direct exposure of the origin and provides a mitigating layer against some network-level attacks, but it does not validate the operator or the downloaded software. The observed edge address is associated with AS203273 and NetCraftersOU - NetCrafters OU, EE; the infrastructure record places the observed service in Ukraine and reports no independently visible origin candidate.
Closing Assessment
Treat the site as unsuitable for credentialed, privileged, or production use, and do not execute its downloadable content outside a controlled, isolated analysis environment until provenance, operator identity, and file integrity have been independently established.
Written analysis generated 2026-09-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of nova-client.com.
- The request stayed on nova-client.com. It was not redirected to another domain. Clear
- Registration is published under Web Commerce Communications Limited dba WebNic.cc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-15. Noted
- The earliest public archive of this site is from 2013-04-17. Clear
- It is hosted on NetCraftersOU, from a server in UA. Noted
Domain intelligence
| Registrar | Web Commerce Communications Limited dba WebNic.cc |
|---|---|
| Hosting | NetCraftersOU - NetCrafters OU, EE |
| Country | UA |
| Server IP | 91.211.13.26 |
| Name servers | ANDY.NS.CLOUDFLARE.COM, BRENNA.NS.CLOUDFLARE.COM |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-16 |
| Domain age | 0.51 years (continuous registration) |
| Domain expiry | 2027-03-15 |
| Archive first seen | 2013-04-17 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about nova-client.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.