oass[.]co[.]jp

Analysis indicates that oass.co.jp is currently classified as a generic phishing site with a high risk rating. The domain is actively listed on two public phishing blocklists (PhishDestroy and PhishingDB) and has been observed in 17 AlienVault OTX pulses. VirusTotal scans report 13 out of 95 security vendors flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The domain was registered on 19 November 1998 and resolves to the IPv4 address 157.7.107.29, which is hosted in Japan under AS7506 (GMO Internet Group, Inc.) and was provisioned by PB-HOSTING. Authoritative name servers are 01.dnsv.jp through 04.dnsv.jp. The web service returns HTTP 200 and presents a TLS certificate from Let’s Encrypt (R12). Technology fingerprints reveal a WordPress installation built with DreamWeaver, backed by MySQL and PHP, served by Apache HTTP Server, and incorporating jQuery and Google Analytics. The page title is "株式会社ＯＡシステムサービス". Publicly available information does not include a detailed content analysis of the landing page, so the exact phishing vector (credential harvesting, malware delivery, etc.) remains unknown. The presence of a legitimate‑looking corporate title suggests possible impersonation of the named Japanese company, but no direct evidence of brand abuse or credential collection has been disclosed. Consequently, the specific victim profile and attack flow cannot be fully determined at this time. Defenders should treat traffic to oass.co.jp as malicious. Immediate actions include blocking the domain and its resolved IP address at perimeter and DNS layers, adding the domain to internal blocklists, and monitoring for outbound connections to the host. Continuous re‑evaluation is advised, given the active status and the potential for future payload deployment. Logging of any attempted accesses and correlation with other threat intelligence feeds will aid in detecting related campaigns.