# app-migrate-fun.pages.dev — SUSPICIOUS

> app-migrate-fun.pages.dev poses as a file-migration tool but pushes malware via a 188.114.96.3 proxy. Users should avoid and report this phishing site.

## Summary
PhishDestroy identifies app-migrate-fun.pages.dev as a live phishing domain masquerading as a file-migration utility to deceive users into downloading malicious payloads. The site is classified under the ‘generic_phishing’ threat type and currently carries an active status with a risk level still under investigation; however, preliminary indicators suggest elevated danger for end-users seeking legitimate cloud-migration services.  This domain resolves to IP address 188.114.96.3 via Cloudflare’s proxy network and has been provisioned with a Google Trust Services SSL certificate, lending it a superficial appearance of legitimacy. VirusTotal scans return a clean 0 out of 95 detection rate, indicating no immediate anti-virus condemnation despite behavioral red flags. The domain is registered through Cloudflare, Inc., leveraging their infrastructure to obscure origin and complicate takedown efforts. There are no current listings on major blocklists such as Google Safe Browsing or PhishTank, and trust scoring engines have not yet flagged the domain. Consequently, the lack of preemptive blocking amplifies the risk of successful compromise.  To mitigate exposure to this threat, users must refrain from clicking or interacting with any links or download buttons on app-migrate-fun.pages.dev. Organizations should block the domain at DNS and firewall levels using the exact string app-migrate-fun.pages.dev. If accidental access occurs, isolate affected systems, scan with updated endpoint protection, and inspect outbound traffic for connections to 188.114.96.3. Report the domain to Google Safe Browsing via their submission portal and forward artifacts to CERT teams for accelerated analysis. Cloudflare abuse channels should also be engaged for infrastructure-level intervention.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/94d656df-31db-4b6e-b243-9e5103fcf4f5
- PhishDestroy: https://phishdestroy.io/domain/app-migrate-fun.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/app-migrate-fun.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app-migrate-fun.pages.dev/
Last updated: 2026-03-28