spxmigrate[.]live

PhishDestroy identifies spxmigrate.live as an active crypto drainer scam site. This domain mimics legitimate migration services to trick users into approving malicious wallet transactions, resulting in direct cryptocurrency theft. The site is currently operational and poses a significant risk to uninformed visitors.

This domain was flagged by 1 of 95 VirusTotal vendors, resolves to IP 216.198.79.1, and uses a Let’s Encrypt SSL certificate. The domain was created recently and has not yet accumulated a notable blocklist presence or trust score, indicating a newly launched operation. The low detection rate suggests it may be evading early security filters.

As of the latest assessment, spxmigrate.live remains active and should be considered highly dangerous. Users are strongly advised to avoid interacting with the site, especially any prompts involving wallet connections or transaction approvals. Security teams should block this domain at the network level and update threat intelligence feeds to prevent further exposure. Immediate reporting to relevant authorities and security platforms is recommended to help mitigate ongoing abuse.