myapps-exadusweb[.]wixstudio[.]com

PhishDestroy identifies myapps-exadusweb.wixstudio.com as a credential-harvesting phishing domain currently impersonating Microsoft 365 login forms to steal corporate and personal account credentials. This Wix-hosted page (34.144.206.118) weaponizes urgency and professional branding to trick users into surrendering Microsoft 365 passwords, enabling attackers to hijack email, OneDrive, and SharePoint data. This domain was flagged under generic phishing with a current status of active and a risk level under investigation. SSL certificate issued by Let’s Encrypt secures the fraudulent page, masking its malicious intent. VirusTotal currently shows zero detections (0/95 engines) despite clear phishing indicators. The page resolves to IP 34.144.206.118 and is hosted on Wix’s platform, which has not yet suspended it. Creation and blocklist metrics remain unverified, leaving users exposed to ongoing campaigns. Visitors who entered any credentials on myapps-exadusweb.wixstudio.com should immediately revoke OAuth access via Microsoft 365 Security Portal, change passwords from a clean device, and scan for unauthorized logins. Report the domain to Microsoft via Cybercrime Unit and flag it to your organization’s SOC if used on a work account. Avoid any links resembling “myapps-exadusweb.wixstudio.com” and verify URLs via official Microsoft portals before entering credentials.