novatrglobal[.]com

Analysis of the domain novatrglobal.com, first observed on October 20, 2025, indicates that it is being used in a generic phishing campaign. The domain is registered through Global Domain Group LLC and is served by the parking name servers cosmos.dns-parking.com and nova.dns-parking.com. DNS resolution returns the IPv4 address 88.222.222.24, which is the sole host associated with the domain at the time of analysis. The domain appears on a single public blocklist; it is listed by PhishDestroy, confirming that at least one security-focused feed has flagged it as malicious.

VirusTotal records show that the domain was examined by 91 scanning engines, none of which raised a detection at the time of the scan. No additional intelligence such as Safe Browsing entries, Open Threat Exchange reports, SSL certificate details, HTTP response codes, reputation scores, or page-title metadata is currently available. Consequently, the observable infrastructure consists of the registrar, the parking name servers, and the single IP address, all of which can be leveraged by defenders to block or monitor traffic.

The lack of further public indicators means that the full scope of the phishing operation, including targeted brands or credential-harvesting pages, remains uncertain. Organizations should add 88.222.222.24 to network deny lists, enforce DNS filtering for novatrglobal.com, and monitor for any future appearance of the domain on additional blocklists or threat-intel platforms. Continuous re-evaluation is advised, as the active status of the domain suggests that the campaign may evolve.