# fun-creator.live — SUSPICIOUS

> Avoid fun-creator.live as it is linked to phishing attempts. The domain is offline but caution is advised when encountering it.

## Summary
PhishDestroy identifies fun-creator.live as a low-risk generic phishing domain. Although the threat level is considered low, users should remain vigilant to avoid potential credential theft or fraudulent activity associated with this site.

The domain fun-creator.live was created recently on March 4, 2026, and was registered through NiceNIC International Group Co., Limited. It resolved to IP address 104.21.13.39 and appeared on three security blocklists. VirusTotal flagged it with 2 out of 95 security vendors, indicating limited but notable suspicion. The page title observed was "Suspected phishing site | Cloudflare," suggesting hosting behind Cloudflare services.

Currently, fun-creator.live has been taken offline, reducing immediate risk. Users and security teams should continue to block and monitor this domain to prevent exposure. Avoid interacting with any content or links related to this domain, and maintain updated security solutions to detect similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.13.39
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["val.ns.cloudflare.com", "coby.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb90a-dc06-707b-bcf2-ff73a0d9f174.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ffc1c8e7-061c-4c4a-8150-fc793fa83f27
- Wayback Machine: https://web.archive.org/web/https://fun-creator.live
- PhishDestroy: https://phishdestroy.io/domain/fun-creator.live/
- LLM endpoint: https://phishdestroy.io/domain/fun-creator.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fun-creator.live/
Last updated: 2026-03-19