energyshobby[.]com

The domain energyshobby.com is currently active and has been observed serving a single HTTP 301 redirect response. Registration data shows the domain was created through Tucows Domains Inc., and its authoritative name servers are ns.forpsi.cz, ns.forpsi.it, and ns.forpsi.net. The domain appears on one security blocklist and is actively blocked by the PhishDestroy feed, indicating that it has been identified as part of a phishing campaign. VirusTotal analysis reports that three of ninety‑one scanned security vendors have flagged the domain, confirming at least a partial detection across multiple AV engines.

The presence of the blocklist entry and the PhishDestroy block suggest that the domain is being used to host or relay malicious content, likely aimed at credential harvesting, consistent with its classification as a generic phishing site. Publicly available intelligence does not include a page title, SSL certificate details, IP address, hosting provider, or geographic location, leaving those infrastructure components unverified. Likewise, no information about the underlying phishing kit or targeted brand has been disclosed, so the exact lure employed by the site cannot be determined at this time. Defenders should treat any traffic to energyshobby.com as hostile.

Recommended mitigation steps include adding the domain to local deny lists, updating DNS filtering solutions to block the three listed name servers, and ensuring that endpoint security products reference the latest blocklist entries from PhishDestroy and other reputable feeds. Continuous monitoring of VirusTotal and other multi‑engine scanners is advised to capture any changes in detection rates. Because the domain currently returns a 301 redirect, security teams should also inspect the destination URL for additional malicious payloads or credential‑harvesting pages. Until further forensic analysis is performed, the domain should be considered a high‑risk phishing resource.