# dappsync-extensions.pages.dev — SUSPICIOUS

> dappsync-extensions.pages.dev is a fake dApps extension impersonating legitimate crypto tools. This site compromises browser security with 0/95 VirusTotal.

## Summary
PhishDestroy identifies dappsync-extensions.pages.dev, a domain actively distributing fake browser extensions that masquerade as legitimate dApps synchronization tools. This site poses a credible threat to cryptocurrency users by tricking victims into installing malicious extensions that harvest seed phrases and private keys. The domain operates under Cloudflare’s infrastructure (IP 172.66.47.185) and leverages a Google Trust Services SSL certificate to appear trustworthy, but its true nature is exposed only by zero detections on VirusTotal despite active distribution. Initial intelligence flags it under a generic phishing classification while investigations proceed.

This domain was flagged with 0 detections out of 95 VirusTotal scans during early analysis, indicating it evades current detection signatures. It is registered through Cloudflare, Inc., which obscures true ownership and hosting details, and resolves to a Cloudflare IP address (172.66.47.185). The SSL certificate issued by Google Trust Services enhances its deceptive legitimacy. This site likely emerged recently, as no long-term reputation exists, and is currently classified under investigation for generic phishing activity involving impersonation of dApp tools used in crypto wallets.

Users who visited dappsync-extensions.pages.dev or interacted with its download prompts are advised to immediately revoke any browser permissions granted to unknown extensions, scan devices with updated antivirus software, and rotate all wallet seed phrases and private keys as a precaution. Disable browser sync features for untrusted extensions and avoid reusing passwords across crypto platforms. Report wallet addresses or transaction anomalies linked to this domain to relevant blockchain security teams. Monitor accounts for unauthorized access and consider hardware wallet solutions with verified integrity for high-value assets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.185

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/578f4d10-a8da-40ce-b4a2-9a2670251baf
- PhishDestroy: https://phishdestroy.io/domain/dappsync-extensions.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/dappsync-extensions.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dappsync-extensions.pages.dev/
Last updated: 2026-03-24