# sanshu-migrations.pages.dev — SUSPICIOUS

> sanshu-migrations.pages.dev poses as a migration service but is a phishing site. Flagged by 2 of 95 VirusTotal vendors, it tricks users with a Google Trust.

## Summary
PhishDestroy identifies sanshu-migrations.pages.dev as a generic phishing domain impersonating a migration service portal.

This domain is currently under investigation as an active phishing threat. PhishDestroy flagged sanshu-migrations.pages.dev after it was detected by 2 of 95 VirusTotal vendors, indicating emerging but unconfirmed malicious activity. The domain was registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and is blocked by Enkrypt and ScamSniffer. It operates under a Google Trust Services SSL certificate, which may mislead users into believing the site is legitimate.

The domain remains active despite its inclusion on two security blocklists and low detection rates on VirusTotal. Users should avoid interacting with sanshu-migrations.pages.dev and report any encountered instances to cybersecurity platforms. Given the combination of a trusted SSL certificate and active phishing operations, heightened caution is advised for anyone accessing this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["Enkrypt", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ba11ace3-697d-44c5-ae8c-b75cf1910cbe
- PhishDestroy: https://phishdestroy.io/domain/sanshu-migrations.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/sanshu-migrations.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sanshu-migrations.pages.dev/
Last updated: 2026-03-24