Summary

  • The autonomous system layer and the netblock layer of NovaCloud-Hosting are administered through two different RIPE organisation handles and two different maintainer accounts.
  • The netblock layer carries a third-party remark, "ip-data managed by noez.de", and routes abuse to a maintainer outside the operator's own brand.
  • The official RIPE database interface was not directly readable during this research; all registry-object content cited here comes from third-party mirrors and is labelled as such.

The AS-level record first. According to the whois mirror of the aut-num object, AS209874 is registered under the name TECHTIDE and tied to organisation ORG-MWUL2-RIPE, with admin-c and tech-c both pointing to role handle NA8939-RIPE https://whois.ipip.net/AS209874. That role object carries a Faro address and is maintained by novacloud-mnt; the aut-num itself lists three maintainers, RIPE-NCC-END-MNT, SBL-MNT and novacloud-mnt https://whois.ipip.net/AS209874. An independent reputation database, NERD, maps ORG-MWUL2-RIPE to Tech Tide Portugal Unipessoal LDA and attributes exactly one autonomous system to it — AS209874 — and zero IP blocks https://nerd.liberouter.org/nerd/org/ripe:ORG-MWUL2-RIPE. In other words, the organisation that owns the AS owns none of the address space the AS announces.

The address space lives under a different identity. The netblocks carrying the netname NovaCloudHosting — for example 5.231.25.0/24 with country NL https://whois.ipip.net/AS209874/5.231.25.0/24 and 77.90.39.0/24 with country DE https://whois.ipip.net/AS209874/77.90.39.0/24 — are registered under organisation ORG-TTPU1-RIPE, a second RIPE handle for the same legal name, Tech Tide Portugal Unipessoal LDA in Quarteira https://whois.ipip.net/AS209874/5.231.25.0/24. Both netblocks name role handle NA9036-RIPE as admin-c and tech-c, and both are maintained not by novacloud-mnt but by GHOSTNET-MNT — and both carry the remark "ip-data managed by noez.de" https://whois.ipip.net/AS209874/5.231.25.0/24 https://whois.ipip.net/AS209874/77.90.39.0/24.

That remark and that maintainer are where the administrative record leaves the operator's own brand entirely. For 77.90.39.0/24, IPinfo's whois view adds a geofeed under the operator's content-delivery domain and shows the abuse contact for the netblock pointing at a mailbox on the ghostnet.de domain, with an abuse role distinct from the operator's own handles https://ipinfo.io/AS209874/77.90.39.0/24. So a customer who reads the registry record for a NovaCloudHosting prefix is directed to a third-party abuse infrastructure, while the operator's own imprint designates its DSA Article 11 contact point on its own domain — novacloud-hosting.com, alongside as209874.net, freeminehost.com and glowberry.gg, under the same Portuguese registration number 517354420 that also appears in the RIPE organisation objects https://novacloud-hosting.com/imprint.

The imprint presents a unified, self-branded contact surface; the registry presents a split one. Both are public records of the same operator, and they do not agree in structure.