omnigatex[.]com

This domain, omnigatex.com, is identified as a high-severity crypto drainer phishing site designed to impersonate the OMNI brand, as evidenced by its page title and operational behavior. Analysis indicates the site was engineered to execute unauthorized transactions by tricking users into connecting wallets, enabling the theft of digital assets through malicious smart contract interactions. No explicit drainer kit signatures were observed, but the infrastructure aligns with known crypto asset exfiltration patterns targeting decentralized finance users. Technical indicators confirm the domain's malicious nature. omnigatex.com resolves to IP address 172.67.174.233 and was registered on July 24, 2025, through Dynadot Inc, a registrar frequently associated with transient phishing domains. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services, a common tactic to lend superficial legitimacy to fraudulent sites. Despite its recent creation, the domain achieved a Gridinsoft trust score of 47/100, further corroborating its high-risk classification. As of the latest assessment, omnigatex.com has been taken offline, likely in response to detection by multiple security platforms, including MetaMask, PhishDestroy, and SEAL. The domain was also documented in a single threat intelligence pulse on AlienVault OTX, suggesting limited but targeted distribution. While the immediate threat has been mitigated, users who interacted with the site prior to its takedown remain at risk of asset compromise. It is recommended to revoke any wallet permissions granted to omnigatex.com, monitor transaction histories for unauthorized activity, and verify domain authenticity before engaging with cryptocurrency-related platforms.