octalsecurefunds[.]live

Analysis indicates that octalsecurefunds.live was registered on 21 February 2026 through Dynadot LLC and is currently resolved to the IPv4 address 163.61.188.5. The address belongs to AS153568 NEW DHAKA HARDWARE and is geolocated in the United States. DNS resolution uses four Lytehosting name servers (dns1‑dns4.lytehosting.com). An MX record is present with priority 0 pointing to the same domain, which is unusual for a credential‑phishing site and may be used to receive victim‑generated emails. The site serves a valid Let's Encrypt certificate (R13) and returns HTTP status 200, confirming that the web service is live. Front‑end technology fingerprints include Bootstrap, LiteSpeed, Smartsupp, OWL Carousel, jQuery UI, jQuery, and HTTP/3, all typical of a modern copy‑cat site.

The visible page title “Octal Secure Fund | Welcome To Octal Secure Fund” suggests an attempt to masquerade as a financial entity named Octal Secure Fund, a brand not previously observed in legitimate channels. VirusTotal scans have identified the domain as malicious in 2 of 95 security engines, and Gridinsoft assigns a trust score of 0 out of 100. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy clearinghouse, confirming its classification as a credential‑phishing operation.

While the exact credential‑stealing mechanisms on the page cannot be confirmed without content analysis, the combination of a legitimate‑looking brand name, active hosting, and low trust scores strongly indicates a phishing campaign designed to harvest login credentials. Defenders should add the domain and its hosting IP to outbound and inbound blocklists, monitor DNS queries for the Lytehosting name servers, and deploy URL filtering to prevent user access. Continuous re‑evaluation is advised, as the infrastructure could be repurposed or expanded.