omnex[.]vip

omnex.vip has been confirmed as an active crypto drainer scam designed to steal cryptocurrency assets from unsuspecting users. This malicious domain impersonates legitimate platforms to trick users into connecting their wallets, whereupon the drainer silently transfers funds to attacker-controlled addresses. Security researchers have identified this site as part of a broader campaign targeting crypto investors with fraudulent “investment” or “reward” portals. PhishDestroy identifies omnex.vip as a high-risk threat with multiple red flags confirmed by independent security tools. The domain resolves to IP 188.114.97.3 and is flagged by 3 out of 95 VirusTotal security vendors. It was registered through Dynadot Inc on March 20, 2026 and holds a valid Let’s Encrypt SSL certificate, which attackers often use to appear legitimate. Despite its short age, omnex.vip has already begun circulating in blocklists, indicating early-stage but active abuse. If you visited or interacted with omnex.vip, especially through a crypto wallet connection, disconnect your wallet immediately and revoke any connected permissions via your wallet’s settings. Do not enter any credentials or approve transactions. Run a security scan on your device and wallet. Report the domain to PhishDestroy and block it on your network. Always verify unknown links using PhishDestroy’s free verification tool before engaging with any crypto-related website.