extension-atmic[.]wixstudio[.]com

PhishDestroy identifies extension-atmic.wixstudio.com as a live phishing domain currently distributing fraudulent content under investigation. This Wix-hosted site is actively engaged in credential harvesting and financial data theft, posing an immediate threat to unsuspecting users. The domain remains accessible despite early-stage detection efforts.

This domain was flagged by 5 of 95 VirusTotal vendors as of the latest scan, operates under Let’s Encrypt SSL, and resolves to IP 34.144.206.118. Blocked by PhishingArmy and OISD, it has been added to at least two security blocklists. The site is hosted on Wix’s platform and leverages the extension-atmic subdomain to mimic legitimate service interfaces, increasing deception potential.

Current status shows the domain is still active and distributing malicious payloads. Users are strongly advised to avoid interaction, report the domain to their security provider or browser vendor, and verify any suspicious links via independent channels. Organizations should update firewall and DNS blocklists immediately to prevent employee exposure. Monitor network traffic for connections to 34.144.206.118 and consider implementing advanced threat intelligence feeds for real-time detection.