autodiscover[.]wfomega[.]com

autodiscover.wfomega.com is presently assessed as a high-risk, active phishing domain based on multiple corroborating technical indicators. As of July 25, 2026, this domain appears on at least one established security blocklist and is specifically blocked by PhishDestroy. Analysis on VirusTotal shows it is flagged by 8 out of 91 security vendors, representing a significant consensus among threat detection services. The domain is configured with the nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com, suggesting hosting infrastructure provided by a common shared hosting provider. The registered domain's HTTP status is 302, indicating that it is actively redirecting visitors, which is a common tactic used in phishing campaigns to route victims to malicious payloads or credential harvesting endpoints.

The registrar of record for autodiscover.wfomega.com is Register SPA. No evidence within the intelligence provided directly associates this domain with a particular brand, phishing kit, or scam variant. The exact web content or payloads distributed via this domain have not been analyzed, and there are no details on the page title or specific impersonation tactics in current reporting. However, the coordinated presence on blocklists, combined with multi-vendor AV detection, is a strong indicator of malicious activity and ongoing threat operations.

Given its still-active status and risk classification, defenders are advised to immediately block autodiscover.wfomega.com across email, web filtering, and endpoint protection layers. Continue to monitor for related indicators in traffic logs, and update detection signatures as new intelligence becomes available. Users should not interact with any content or communications referencing this domain until the threat is fully mitigated.