Is nova-crypto.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, served from the nova-crypto.xyz domain, presents itself on its homepage as "DREADEDCRYPTO", a Discord and social lookup shop. It appears to sell lookup or data-retrieval services tied to Discord and social-media accounts, under crypto-themed branding. The captured homepage was reachable and rendered normally, but the available content gives no further detail about the operator or the exact service terms.

Scam/Impersonation Risk

This is the decisive area of the assessment. Multiple major security engines currently flag the domain as malicious or suspicious, and the pattern amounts to a confirmed blacklist listing. Infrastructure protections and a valid certificate cannot offset this. The domain is also very recently registered. Its archive footprint is thin, with a single capture, so no history of stable, legitimate operation exists to counterbalance the detections. The sandbox did not observe wallet-drainer behavior, clipboard manipulation, hidden forms, credential posts to external hosts, or content cloaking, so the available evidence does not show the page actively attacking visitors during testing. That absence is not reassurance, because reputation listings of this kind often reflect behavior that is conditional, targeted, or short-lived. A high proportion of page resources load from external origins, which adds mild concern. The business theme of selling account lookups is itself sensitive, since such services sit close to privacy-invasive and account-targeting activity. No conflicting legal identities or brand impersonation were observed. Evidence:

• Homepage: titled as a Discord and social lookup shop, a theme that carries inherent abuse potential.
• Domain registration: created in July 2026 (~0.3 years old), registered via NameCheap, Inc.
• Web archive: 1 snapshot (first and last seen 2026-07-31), 1 year tracked, so no continuity of history.
• Reputation: multiple leading security vendors classify the domain as malicious or suspicious, which independently triggers a hard score ceiling.

Regulatory Verification Notes

The captured pages did not establish a named operating company, jurisdiction, licensing status, or registered business identity. The page-level analysis that would have extracted such claims was unavailable, so the operator remains independently unverified. No third-party broker or regulatory-database match exists for this domain. That neither supports nor contradicts the reputation findings. The lookup-shop proposition may also raise data-protection and platform terms-of-service questions, since it concerns access to personal account information. The site shows no evidence of a regulatory standing that would soften the assessment. Evidence:

• Homepage: no verifiable company name, registration number, or licensing reference was established from the captured content.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-12, with 46 days remaining; this confirms encryption, not identity.
• Third-party broker dataset: no match for this domain.

What to Verify Next

Any contact with the operator should be treated as unverified. Only through an independent route should anyone try to establish who runs the site, such as the registrar's abuse process or contact details for the business obtained outside the site. Any listing-status checks should be repeated with the flagging security vendors directly. These checks would show whether the detections have been resolved or are still current. Users should also confirm that the official support channels are reachable outside the site's own pages before sharing any information. Evidence:

• Homepage: operator identity is not established in the captured content.
• Reputation: detections from several tier-one vendors are current at the time of analysis.
• Domain registration: created 2026-07-07, expiring 2027-07-07, with a single archive capture.

Summary Verdict

The domain carries an elevated-risk, clearly cautionary posture. Confirmed adverse external detections and a very young, thinly documented footprint outweigh the technically clean sandbox behavior and the valid encryption. Legitimacy cannot be inferred, and the operator remains unidentified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address in the United States, with no origin server visible. This setup is common and has a valid certificate from a recognized issuer. It is a mitigating factor only. It prevents independent verification of the true hosting location and can mask rapid content changes, and it does not outweigh the reputation findings.

Closing Assessment

At most, the site should be viewed in a read-only manner. Account logins, credential entry, payments, and any financial or crypto-related interaction should be avoided until the detections are cleared and the operator is independently verified.