# icm-migrate.live — SUSPICIOUS > icm-migrate.live is a live crypto drainer impersonating ICM (International Coin Market). Flagged by 0 VirusTotal vendors, verify safety on PhishDestroy before. ## Summary PhishDestroy identifies icm-migrate.live as an active crypto drainer scam currently under investigation. The domain is engineered to deceive users into connecting crypto wallets under the guise of a legitimate migration portal for ICM (International Coin Market), a known cryptocurrency platform. Given the live status and absence of current blocklist flags, this threat represents an emerging and high-risk impersonation tactic targeting crypto investors and traders. This domain was flagged by zero of ninety-five VirusTotal security vendors as of the most recent scan, revealing its stealthy evasion of automated detection systems. The site operates under a Let’s Encrypt SSL certificate and resolves to IP address 104.21.93.71. It was registered through OwnRegistrar, Inc. on April 08, 2026. Despite its recent creation, this domain has not yet been added to any major blocklists or threat intelligence feeds, indicating a potentially short operational window before broader detection occurs. Trust scores remain neutral due to minimal telemetry and delayed vendor response, amplifying the risk for unwary users. Users are strongly advised to avoid interacting with icm-migrate.live and to verify any suspicious cryptocurrency-related domains using PhishDestroy’s real-time scanning tool. Given the absence of current detection and the domain’s fresh registration, the risk of financial loss through wallet draining remains high. Security teams are recommended to monitor IP 104.21.93.71 and the domain for rapid takedown actions, while end-users should treat any unsolicited migration or wallet connection prompts with extreme caution and confirm legitimacy via official channels only. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-04-08 11:08:50 - Registrar: OwnRegistrar, Inc. - IP: 104.21.93.71 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/icm-migrate.live - PhishDestroy: https://phishdestroy.io/domain/icm-migrate.live/ - LLM endpoint: https://phishdestroy.io/domain/icm-migrate.live/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/icm-migrate.live/ Last updated: 2026-04-08