omni-desktop[.]wixstudio[.]com

omni-desktop.wixstudio.com is a confirmed Microsoft 365 credential phishing domain currently active and under investigation. The page is hosted on the Wix Studio platform (omni-desktop.wixstudio.com) and mimics the legitimate Microsoft 365 login interface to deceive users into entering their corporate or personal credentials. This is a live attack vector with no detections yet on VirusTotal despite active exploitation, indicating a rapidly evolving threat that requires immediate awareness.

This domain was flagged by 3 of 95 VirusTotal vendors as of the latest scan, possesses a valid Let’s Encrypt SSL certificate, and resolves to IP 34.144.206.118. The domain was created recently and is associated with a Wix Studios subdomain, suggesting a compromised or fraudulently registered site leveraging a reputable hosting platform to evade detection. Trust scores across threat intelligence feeds remain low due to the novelty of the domain and the absence of historical data, making it a stealthy threat actor tool.

PhishDestroy assesses this phishing campaign as active and potentially escalating given its current lack of detection. Organizations and individuals are strongly advised to block inbound traffic to 34.144.206.118 at the network perimeter and update email security filters to block messages referencing omni-desktop.wixstudio.com. Users should verify URLs before entering credentials and enable multi-factor authentication on all Microsoft 365 accounts. Monitor for anomalous login attempts from this IP range and report any observed activity immediately through your security incident response channel.