atomicwaletio[.]wixstudio[.]com

Analysis of atomicwaletio.wixstudio.com indicates a phishing domain targeting cryptocurrency wallet users, now offline. The domain, registered on May 20, 2026, through GoDaddy.com, LLC, resolved to IP address 34.144.206.118, hosted on Google Cloud infrastructure in the United States. The site was served via Google Cloud CDN using HTTP/3 and employed technologies including Wix and React, consistent with Wix Studio's platform. At the time of investigation on July 24, 2026, the domain returned an HTTP 404 status with the page title '404 Error: Page Not Found | Wix Studio,' suggesting the phishing content had been removed or the site was taken down. Detection data reveals the domain was flagged by 7 of 91 security vendors on VirusTotal, though the specific detection rules or signatures are not disclosed in available intelligence.

Gridinsoft assigned a trust score of 0/100, and the domain appeared on at least one security blocklist. The SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. Nameservers were configured as dns1.p08.nsone.net through dns4.p08.nsone.net, a setup not inherently suspicious but frequently used in phishing campaigns for reliability. While the domain name suggests an attempt to impersonate Atomic Wallet, a known cryptocurrency wallet service, no direct evidence from the page title or available intelligence confirms the exact content or target brand. The use of Wix Studio's platform is notable, as it allows rapid deployment of phishing pages with minimal technical expertise.

The domain's brief active period and subsequent takedown align with common phishing campaign lifecycles, where sites are frequently rotated or removed to evade detection. Defenders should treat this domain as part of a broader phishing infrastructure targeting cryptocurrency users. Network-level blocking of the domain and its resolved IP (34.144.206.