anyone-migration[.]pages[.]dev

This domain is flagged as a generic phishing threat with a high-risk designation as of July 29, 2026. The domain anyone-migration.pages.dev is currently active and has been blocked by four security entities: PhishDestroy, MetaMask, ScamSniffer, and SEAL. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc. and uses Cloudflare nameservers (aarav.ns.cloudflare.com and joselyn.ns.cloudflare.com). It resolves to IP address 188.114.96.3, which is associated with Cloudflare's hosting infrastructure.

VirusTotal scanning shows 12 out of 91 security vendors flagging this domain, and it appears on 4 separate security blocklists, indicating moderate-to-high detection across the threat intelligence community. The exact content of the hosted page has not been analyzed in the available intelligence, so the specific phishing lure or brand impersonated remains unconfirmed. Defenders should treat this domain as a confirmed phishing vector based on the multi-vendor detection and blocklist presence.

Recommended actions include blocking the domain at network and endpoint levels, monitoring for associated subdomains or related infrastructure under the same Cloudflare account, and submitting any observed URLs or samples to threat intelligence platforms for further analysis. Users should be warned not to interact with the domain, as it may attempt credential harvesting, malware distribution, or other fraudulent activity. Continued monitoring is advised given the active status and registration through a major CDN provider that can rapidly change hosting endpoints.