spectrumlabs[.]online

This domain, spectrumlabs.online, is flagged as an active crypto drainer phishing site with a high-risk classification. Registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP 172.67.136.99, hosted on Cloudflare infrastructure in Canada. The page title, 'Spectrum Finance Labs - open-source cross-chain DEX,' suggests targeting users of decentralized exchange platforms, though the exact content and functionality remain unconfirmed without direct analysis. The domain is currently active, returning an HTTP 200 status, and is blocked by at least one security vendor (PhishDestroy). It appears on one security blocklist and is referenced in two AlienVault OTX threat intelligence pulses. Technologies detected include WebAssembly, React, Google Tag Manager, and Cloudflare services, which may be leveraged to obfuscate malicious activity or enhance phishing credibility. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority that does not inherently indicate legitimacy. Six of 91 security vendors on VirusTotal flag the domain, though this number may not reflect real-time detection efficacy. Defenders should treat this domain as hostile and prioritize blocking it at the DNS or proxy level, particularly in environments where cryptocurrency transactions or decentralized finance activities occur. Further investigation into associated wallet addresses, transaction patterns, or linked infrastructure is recommended to identify broader campaign scope.