msapps20394[.]ocbdc[.]com

The domain msapps20394.ocbdc.com is flagged by multiple sources. It was registered through GoDaddy on Oct 31 2018. The hosting IP is 162.241.244.59. It appears on one security blocklist and is blocked by PhishDestroy. VirusTotal analysis shows nine of ninety-one scanners flagged it as malicious, indicating a moderate detection consensus.

No public Safe Browsing entry is noted. No additional intel such as OTX tags, SSL certificate details, or HTTP response codes are available. The lack of further metadata means the exact phishing campaign content cannot be confirmed, but the presence of multiple vendor detections and blocklist inclusion suggests active malicious use. Defenders should treat the domain as hostile. Recommendations: add the domain and its IP to deny lists, monitor DNS queries for the domain, enforce URL filtering, and consider automated blocking in web proxies.

Continue to watch for updates from threat intel feeds, especially any new VirusTotal submissions or blocklist additions. If any internal logs show connections to the IP, investigate for credential harvesting. The domain’s age (nearly eight years) does not preclude its use in recent campaigns; adversaries often recycle older domains. Until further forensic evidence emerges, the domain should be considered a high‑confidence phishing indicator.