# app-migratesfun.live — SUSPICIOUS

> app-migratesfun.live is a live Microsoft 365 credential harvesting domain with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies active credential harvesting operations linked to the domain app-migratesfun.live, which impersonates Microsoft 365 services to deceive users into surrendering login credentials.

This domain represents a generic phishing threat currently under investigation. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 104.21.14.30. The domain was created on March 11, 2026, and utilizes a Let’s Encrypt SSL certificate. As of the latest scan, it remains unflagged by VirusTotal, with 0 detections out of 95 vendors.

The domain remains active and poses a high risk due to its use of Microsoft 365 impersonation. Threat actors are likely distributing phishing emails with malicious links pointing to app-migratesfun.live, aiming to harvest corporate and personal credentials. Users should avoid interacting with this domain, refrain from entering credentials, and report any suspicious emails to their security teams. Organizations are advised to block this domain at the network perimeter and update email filtering rules to detect similar campaigns. Immediate inspection of email logs for traffic to 104.21.14.30 is recommended to prevent potential breaches.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-11 20:21:45
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.14.30

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b7d916eb-e5c8-47f9-a529-b1669367974b
- PhishDestroy: https://phishdestroy.io/domain/app-migratesfun.live/
- LLM endpoint: https://phishdestroy.io/domain/app-migratesfun.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app-migratesfun.live/
Last updated: 2026-03-23