noventrara[.]digital

Analysis as of July 25, 2026 identifies noventrara.digital as an active phishing infrastructure. The domain was registered on February 22, 2026 through Dynadot LLC and is hosted behind Cloudflare, indicated by the nameservers maya.ns.cloudflare.com and fonzie.ns.cloudflare.com and the IP address 104.21.7.147 belonging to AS13335 Cloudflare, Inc., located in the United States. The site serves content over HTTPS using a Let’s Encrypt certificate (E8) and negotiates HTTP/3. An HTTP request returns status code 200, and the page title presented by the server is “Noventrara — Vignette Österreich: Ihr vollständiger Leitfaden”, suggesting an attempt to reference Vignette Österreich, although the exact content of the page has not been examined.

VirusTotal records show three of ninety‑five security vendors flag the domain, and the domain appears on a single external blocklist, where it is listed by PhishDestroy. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. No additional public threat‑intel sources such as OTX or Google Safe Browsing are referenced in the current data set. The combination of a recent registration, Cloudflare front‑end, low trust score, and detection by multiple vendors indicates a high‑risk phishing operation.

Defenders should block DNS resolution for noventrara.digital at the network perimeter, add the associated IP 104.21.7.147 to any malicious‑IP monitoring lists, and ensure that web‑gateway filters reference the PhishDestroy blocklist entry. Continuous monitoring of the domain’s certificate renewal and any changes to its hosting configuration is advised, as threat actors often rotate infrastructure behind Cloudflare. Because the page title references Vignette Österreich, organizations that rely on that brand should alert users to the possibility of credential‑harvesting attempts tied to this domain.