octopusenergylimited[.]com

The domain octopusenergylimited.com was registered on September 01, 2025 through HOSTINGER operations, UAB. Since its creation it has been observed resolving to the IPv4 address 156.232.88.10 and using the authoritative name servers ns1.cloudoon.com, ns2.cloudoon.net, and ns3.cloudoon.org. Within a short period the domain was added to at least one public security blocklist and is currently listed by PhishDestroy as a blocked phishing source. VirusTotal analysis shows that two of ninety‑one scanning engines have raised detections, confirming that the domain is associated with malicious activity. The internal risk rating is high, and the operational status remains active, indicating that the infrastructure is still reachable.

The use of the cloudoon name servers suggests the infrastructure is hosted on a shared cloud‑based DNS platform, a pattern frequently observed in recent phishing campaigns that rely on rapid domain provisioning. The hosting IP 156.232.88.10 is not presently linked to a known reputable service provider in public ASN databases, supporting the inference that the server may be part of a disposable hosting arrangement. No publicly available SSL certificate details, HTTP response codes, or page metadata have been published, so the exact content served by the site cannot be verified at this time. Likewise, additional threat‑intel feeds such as OTX or further blocklists have not been referenced, leaving the broader distribution of the infrastructure unknown.

Defenders should proactively block traffic to octopusenergylimited.com at perimeter firewalls and DNS resolvers, monitor for outbound connections to the hosting IP, and add the domain to internal blocklists. Continuous re‑scanning with multi‑engine services is advised to capture any changes in detection status. Organizations receiving emails that appear to originate from Octopus Energy or related brands should treat any links to this domain as malicious and advise users to avoid interaction.