# migration-omira.xyz — SUSPICIOUS

> PhishDestroy identifies migration-omira.xyz as an active crypto-draining phishing site. 4 of 95 VirusTotal scanners flag the domain first seen 14 Aug 2025; do.

## Summary
PhishDestroy identifies migration-omira.xyz as a cryptocurrency-draining phishing domain masquerading as a migration tool for OMIRA tokens.

The site is configured to harvest private keys, wallet passwords, and seed phrases via a malicious drainer kit preloaded on 188.114.97.3. The domain was registered on 14 August 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and already shows an elevated detection ratio of 4/95 security vendors on VirusTotal. Google Safe Browsing has not yet blacklisted the URL, leaving users exposed without additional protections.

Currently the domain resolves and serves the drainer, with no takedown or blocklist expansion reported. Immediate actions include network-level blocking of 188.114.97.3 and 188.114.96.0/24, browser-extension blocking of migration-omira.xyz, and wallet software warnings for any connection prompts. Remaining risk remains elevated while the domain remains active and undetected by major browsers, necessitating continued monitoring and user caution until global blocklists converge.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-14 19:22:44
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c2f63fd8-67e7-4287-9b03-e464e6f0d834
- PhishDestroy: https://phishdestroy.io/domain/migration-omira.xyz/
- LLM endpoint: https://phishdestroy.io/domain/migration-omira.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/migration-omira.xyz/
Last updated: 2026-03-27