octaglobal[.]top

PhishDestroy identifies octaglobal.top as an active credential-theft site designed to harvest Office 365 login details. The domain impersonates a legitimate Microsoft portal, tricking users into entering their corporate credentials. Once harvested, stolen credentials are used to access email, files, and internal resources, enabling account takeover and data exfiltration. This domain was flagged by only 1 of 95 VirusTotal security vendors, registered on May 15, 2024 through Global Domain Group LLC, and resolves to IP 37.49.229.75. The site uses a Let's Encrypt SSL certificate to appear legitimate, increasing the likelihood of user deception. If you visited this site, immediately change your Microsoft 365 password using a known-safe device and enable multi-factor authentication. Scan your device for malware using up-to-date antivirus software, and revoke any suspicious OAuth app permissions in your Microsoft account settings. Report the incident to your IT or security team, and avoid clicking links from unsolicited emails or messages.