more-atomic[.]wixstudio[.]com

PhishDestroy identifies more-atomic.wixstudio.com as an active generic phishing domain engineered to harvest login credentials or sensitive data under the guise of legitimate services. This Wix-hosted site currently evades detection, showing zero detections on VirusTotal (2/95) despite clear malicious intent. The domain resolves to Google Cloud IP 34.144.206.118 and leverages a valid Let's Encrypt SSL certificate to appear trustworthy, which increases the risk of successful user deception.

Technical analysis reveals this domain is a recently activated phishing resource with no historical detections or blocklist presence, suggesting it may be a newly weaponized infrastructure. While the precise age and registrar details remain under investigation, the absence of VirusTotal flags (2/95) and clean SSL status indicate that automated scanners have not yet flagged its payload distribution endpoints. The domain’s deployment on a reputable hosting platform like Wix further complicates detection, as attackers often abuse legitimate services to host malicious content with minimal oversight.

Users who have encountered or visited more-atomic.wixstudio.com should immediately cease all interactions and avoid entering any credentials or personal information. If credentials were submitted, reset passwords for affected accounts and enable multi-factor authentication where available. Report the domain to your organization’s security team or to abuse channels for Wix and Let’s Encrypt to aid in takedown efforts. Monitor accounts closely for signs of compromise, such as unusual login attempts or unauthorized transactions, and consider deploying network-level blocking rules for the associated IP 34.144.206.118 to prevent further exposure within your environment.