hivello-migrate[.]xyz

PhishDestroy identifies hivello-migrate.xyz as an ACTIVE phishing domain designed to mimic legitimate migration services, specifically targeting unsuspecting users to harvest sensitive credentials. This domain was flagged by VirusTotal with 3 out of 95 security vendors detecting it as malicious, indicating a significant but not universal consensus on its threat level. Registered through OwnRegistrar, Inc. on January 17, 2026, and resolving to IP address 188.114.97.3, hivello-migrate.xyz has been issued an SSL certificate by Google Trust Services, which may lend it a false sense of legitimacy. The domain's recent creation and low blocklist count suggest it remains in early campaign phases, increasing the risk of additional unreported victims. PhishDestroy advises all users who visited hivello-migrate.xyz to immediately change passwords used on or shared with the site, enable two-factor authentication on connected accounts, and scan devices for malware using updated antivirus software. Given the active status and low detection rates, treat this domain as a high-confidence threat and avoid all future interaction. Report the domain to your browser’s safe browsing program and network administrator to help block further access.