escrow-atomicwallet[.]com

The domain escrow-atomicwallet.com was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 198.187.29.4, which is hosted in the United States under ASN 22612, a Namecheap, Inc. network. The web server presented a Sectigo Public Server Authentication CA DV R36 TLS certificate, indicating a valid‑looking HTTPS endpoint that could be used to lend credibility to malicious pages. The only observable HTTP response consists of a page titled “Account Suspended,” which is a common placeholder used when legitimate content is removed but does not provide any direct evidence of the payload.

Security intelligence shows that the domain is listed on a single security blocklist and is actively blocked by the PhishDestroy filtering service. Independent analysis from Gridinsoft assigned a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain’s legitimacy. VirusTotal scanned the domain and reported that 4 of 95 antivirus and URL‑reputation engines flagged it as malicious, reinforcing the suspicion that the site is being leveraged for a crypto‑related scam. The threat profile is classified as a crypto scam that impersonates the brand Atomic Wallet, suggesting that attackers may attempt to harvest cryptocurrency credentials or lure victims into fraudulent transactions.

Defenders should continue to block escrow-atomicwallet.com at perimeter defenses, DNS filtering, and endpoint protection layers. Given the domain’s recent creation date, its association with a reputable SSL certificate, and the low but non‑zero detection rate, it is prudent to monitor related network traffic for any attempts to resolve or contact the IP address 198.187.29.4. Users of the Atomic Wallet service should be warned not to trust any communications that reference the escrow‑atomicwallet.com domain, and any credential submissions to that site should be considered compromised.