atom-moustiques[.]com

This domain is flagged as an elevated-risk credential theft operation targeting users through deceptive login portals. Analysis indicates the infrastructure is designed to harvest authentication details, likely for financial fraud or unauthorized account access. The domain exhibits multiple high-confidence indicators of malicious intent, warranting immediate caution. Infrastructure analysis reveals the domain was registered on March 25, 2026, through OVH sas, a registrar frequently associated with abusive registrations. It resolves to IP address 146.59.209.152, located in France under OVH hosting. The domain is currently offline but was previously active with a Let's Encrypt SSL certificate (serial E8), a common tactic to lend superficial legitimacy. Security vendors on VirusTotal flagged the domain at a rate of 18/95, with detections spanning phishing, malware distribution, and credential harvesting. It appears on two security blocklists, including PhishDestroy and PhishingDB, further corroborating its malicious classification. To mitigate credential theft risks, users should verify domain authenticity before entering login credentials, particularly for financial or email accounts. Organizations should implement domain-based email filtering to block messages originating from this domain or its associated IP. If credentials were entered on this site, immediate password resets are advised, along with multi-factor authentication enforcement for all critical accounts. Network-level blocking of the IP 146.59.209.152 and monitoring for related subdomains or SSL certificates from the same issuer (Let's Encrypt E8) can reduce exposure to similar threats.