migratefun-m[.]pages[.]dev

This domain, migratefun-m.pages.dev, is flagged as a generic phishing site impersonating a legitimate token migration platform under the name Migrate.fun. Analysis indicates the threat type aligns with crypto-related fraud, likely targeting users seeking to migrate or upgrade digital assets. The page title explicitly references a token migration service, a common lure for draining wallets or harvesting credentials. No specific drainer kit signatures were identified, but the infrastructure and branding suggest a high-risk operation typical of crypto phishing campaigns. Infrastructure analysis reveals the following technical indicators: VirusTotal returned 0 detections out of 95 engines, indicating the domain has not yet been widely flagged by automated scanning tools. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. It was created on April 13, 2026, though this date may reflect backdating or registry manipulation. The domain appears on 3 security blocklists, including MetaMask and PhishDestroy, despite its clean VirusTotal record. The SSL certificate is issued by Let’s Encrypt, and the site employs technologies such as React, HSTS, and HTTP/3, which are consistent with modern phishing infrastructure designed to appear legitimate. The domain is currently offline, reducing immediate risk to users. However, the presence on multiple blocklists and the use of Cloudflare’s infrastructure suggest a deliberate effort to evade detection while maintaining operational flexibility. The discrepancy between the VirusTotal score and blocklist status indicates potential gaps in automated detection systems, highlighting the need for manual review. Users who interacted with this domain should revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the authenticity of any token migration services through official channels. The remaining risk includes potential re-emergence under a similar domain or IP address, necessitating continued vigilance.