atiomc[.]wixstudio[.]com

PhishDestroy identifies the phishing domain atiomc.wixstudio.com as a generic phishing host currently under investigation for mimicking a cryptocurrency wallet login portal.

This domain resolves to the IPv4 address 34.144.206.118 and is served over a Let’s Encrypt SSL certificate, providing a deceptive veneer of legitimacy. VirusTotal scanning shows 0 detections out of 95 engines at the time of analysis, indicating that most antivirus products have not yet flagged the payload. The WixStudio platform is leveraged to host the imposter page, which is likely delivered via spoofed emails or social-engineering links. Creation details and further registrar intelligence are still being compiled; however, the absence of detections correlates with a short operational window or obfuscated hosting infrastructure.

PhishDestroy currently labels the domain as active and under investigation with a generic phishing classification. The low VT score suggests this strain is nascent or intentionally evasive, increasing the risk of successful user compromise. Users are advised to block access at the network perimeter and avoid entering any cryptocurrency wallet credentials. No community blocklist entries have been recorded yet, leaving many filters still ineffective against this threat. Response actions include continued monitoring, SSL takedown requests to Let’s Encrypt, and IP de-listing via cloud providers. The residual risk remains elevated until detections rise and the drainer kit is fully profiled.