# spectraproduction.pages.dev — SUSPICIOUS

> Beware: spectraproduction.pages.dev is a phishing site mimicking NFT minting pages. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies an active phishing campaign hosted at spectraproduction.pages.dev, posing as a legitimate NFT minting platform to deceive users into connecting cryptocurrency wallets. The domain employs a drainer kit designed to siphon funds under the guise of a 'secure' minting process, with no affiliation to the actual Spectra Production brand. The infrastructure leverages Cloudflare’s Pages service to host malicious content, aiming to exploit user trust in recognizable web frameworks. This campaign uses social engineering tactics, likely distributed via phishing emails or fake NFT project announcements, to lure victims to the fraudulent site.  This domain was flagged by PhishDestroy with a generic phishing threat type under seed 2656d9. Technical indicators include a VirusTotal detection score of 0/95, registration through Cloudflare, Inc., and resolution to IP 172.66.47.198. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. As of this report, the domain has not been listed on Google Safe Browsing (GSB) and remains unblocked by major threat intelligence platforms. The domain’s creation date and exact blocklist counts are under further investigation.  The campaign is currently active, with no remediation actions taken against the domain at this time. Security teams and users are advised to block traffic to spectraproduction.pages.dev and refrain from engaging with any associated content. Remaining risk is classified as 'under investigation' due to the lack of detections on VT and GSB, indicating the threat is likely in its early or stealthy propagation phase. Immediate action is recommended to prevent potential fund loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.198

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8bd5c407-8ee4-4778-be2c-03c4a3b06e82
- PhishDestroy: https://phishdestroy.io/domain/spectraproduction.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/spectraproduction.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/spectraproduction.pages.dev/
Last updated: 2026-03-25