bob-migration[.]xyz

PhishDestroy identifies the active phishing domain bob-migration.xyz as a generic phishing campaign currently under investigation by threat intelligence teams. The domain poses a credible threat to users expecting legitimate migration services, as it is designed to deceive visitors into disclosing sensitive information or installing malware. The campaign remains active as of the latest assessment.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating it has not yet been widely recognized as malicious. It resolves to IP address 188.114.96.3 and uses nameservers drew.ns.cloudflare.com and fish.ns.cloudflare.com. Registered through NameSilo, LLC on June 21, 2026, the domain’s recent creation suggests a hastily deployed threat infrastructure. With no current blocklist detections and low trust scores across threat intelligence platforms, bob-migration.xyz remains a low-detection, high-risk phishing vector.

Users are advised to immediately block access to bob-migration.xyz and avoid interacting with any associated content. Organizations should update firewall rules, email filtering systems, and endpoint protection tools to include this domain and IP. If exposure occurs, disconnect from networks, scan for compromise, and report the incident to IT security teams. This campaign should be treated as an active threat due to its unresolved status and lack of broad detection.