atonic-trades[.]com

The domain atonic-trades.com has been identified as a cryptocurrency credential theft site, targeting users through deceptive login and wallet interfaces. Analysis indicates the site is currently offline, though it remains under investigation for fraudulent activity involving the theft of digital asset credentials. No legitimate brand affiliation has been confirmed, suggesting the operation functions as an independent fraud scheme rather than a brand impersonation campaign. Infrastructure analysis reveals the domain was registered on June 15, 2024, through Tucows Domains Inc. and is associated with an SSL certificate issued by GoDaddy.com. The site resolves to the IP address 198.251.89.220 and has been flagged by one security blocklist, though it currently shows zero detections across 95 VirusTotal vendors. Additional indicators include a Scamadviser trust score of 1 out of 100 and a single entry in AlienVault OTX threat intelligence pulses, further supporting its malicious classification. At present, the domain has been taken offline, though residual risk remains due to its recent activity and lack of widespread detection. Security teams are advised to monitor network logs for connections to 198.251.89.220 and review endpoint activity for any interaction with atonic-trades.com. Organizations should update blocklists to include this domain and IP, while users should be cautioned against entering credentials on any site matching this infrastructure profile. Continuous monitoring of related domains registered through Tucows Domains Inc. during mid-June 2024 is recommended to identify potential copycat operations.