# atom.one — SUSPICIOUS > atom.one hosts a credential harvesting scam targeting users with fake login pages. Check the full report for detailed indicators. ## Summary The domain atom.one has been identified as hosting a credential harvesting scam, a specific type of phishing threat where attackers attempt to steal user login credentials. There is no publicly known association with any legitimate brand or use of a known drainer kit. This domain is under active investigation due to its suspicious behavior focused on capturing sensitive login information. Technical analysis reveals that atom.one currently has a VirusTotal detection score of 0 out of 95, indicating no antivirus engines have flagged it yet. The domain resolves to IP address 188.114.97.3 and was registered on May 20, 2015 through the registrar 101domain GRS Limited. Its SSL certificate is issued by Google Trust Services, which can lend a false sense of legitimacy. There is no indication that Google Safe Browsing currently flags this domain, and it is not listed on any known blocklists at this time. At present, atom.one remains active with a risk level classified as under investigation. Because it uses valid SSL and a relatively aged registration, users may be misled into trusting the site. Security teams should monitor and consider blocking the IP address and domain proactively. Users are advised to avoid interacting with atom.one and not to enter any personal or login information. Continued vigilance and further forensic monitoring are necessary until the threat is confirmed or mitigated. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2015-05-20 12:23:02 - Registrar: 101domain GRS Limited - IP: 188.114.97.3 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/3fbb71d1-3ee3-4503-8a56-7df6cabbe377 - PhishDestroy: https://phishdestroy.io/domain/atom.one/ - LLM endpoint: https://phishdestroy.io/domain/atom.one/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/atom.one/ Last updated: 2026-03-28