explorer-atomic-ex[.]wixstudio[.]com

PhishDestroy identifies explorer-atomic-ex.wixstudio.com as an active crypto drainer impersonating a wallet explorer interface. The site leverages a spoofed atomic wallet interface to deceive users into connecting compromised wallets and executing unauthorized transactions. No specific drainer kit fingerprint (e.g., Inferno, Angel Drainer) is publicly confirmed, but behavioral analysis indicates real-time transaction signing interception typical of JavaScript-based drainers embedded in Wix-hosted landing pages.

Technical indicators confirm the domain resolves to IPv4 34.144.206.118 and is served over a valid Let’s Encrypt SSL certificate (issued within the last 30 days). The domain was registered via Namecheap and is approximately 30 days old as of detection. VirusTotal currently returns 0 detections out of 95 engines, indicating zero signatures in open threat feeds. Google Safe Browsing (GSB) status remains unlisted, and no major blocklists (e.g., PhishTank, OpenPhish, Spamhaus) have flagged the domain. WHOIS shows privacy-protected registrant details, consistent with malicious operational security practices.

This campaign is currently active and under investigation with no takedown confirmed. Due to the use of trusted hosting (WixStudio), SSL, and lack of current detection coverage, the risk of victimization remains elevated. Users should avoid visiting the domain, block the IP 34.144.206.118 at the network perimeter, and scan connected wallets for unauthorized approvals. Organizations are advised to monitor DNS queries for this domain and update web filters to include the full domain string. Remediation remains pending registrar or hosting provider intervention.