# fans-specifications-pdf.pages.dev — SUSPICIOUS

> fans-specifications-pdf.pages.dev is pushing fake PDF phishing lures. This Cloudflare-hosted site has 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies fans-specifications-pdf.pages.dev as an active fake-PDF phishing domain under evaluation for credential theft. The lure mimics a legitimate specifications document while harvesting form submissions. Risk is currently labeled under_investigation but shows high interaction potential due to Cloudflare fronting and Let’s Encrypt TLS.  fans-specifications-pdf.pages.dev currently shows 0 detections out of 95 VirusTotal engines (0/95), was registered through Cloudflare, Inc., resolves to IP 172.66.47.148, and holds a Let’s Encrypt SSL certificate. Creation date is not disclosed by Cloudflare, and no public blocklists or trust-score services currently flag the domain. Low detection coverage increases the risk of successful user compromise through social engineering.  Mitigation for fake-PDF phishing includes: block the domain at DNS and firewall layers, inspect TLS traffic for anomalous POST requests to /submit or similar endpoints, and educate users to verify document sources via direct publisher websites. Organizations should also deploy browser isolation and form-content inspection to block hidden credential harvesters embedded in spoofed PDF previews.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.148

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0b423b1b-3ed7-432b-a58f-ce878757850f
- PhishDestroy: https://phishdestroy.io/domain/fans-specifications-pdf.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/fans-specifications-pdf.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fans-specifications-pdf.pages.dev/
Last updated: 2026-04-01