# dexsyncs.pages.dev — SUSPICIOUS

> Dexsyncs.pages.dev is a live crypto drainer impersonating DeFi platforms. 0/95 VirusTotal detections after registering via Cloudflare on 2025-03-14.

## Summary
PhishDestroy identifies dexsyncs.pages.dev as an active crypto wallet drainer posing as a legitimate DeFi synchronization tool. Once visited, the page attempts to trick users into connecting their wallets under the false promise of synchronizing transactions or liquidity. Behind the surface, the site executes malicious JavaScript that drains tokens directly from connected wallets without requiring additional permissions or signatures, a technique known as a crypto drainer.  This domain was flagged on 2025-04-05 with seed 023be8 and is currently under investigation. Cloudflare, Inc. registered it on 2025-03-14, and it resolves to IP 172.66.44.53 with a Google Trust Services SSL certificate. VirusTotal scanning shows 0 detections out of 95 engines as of the latest update, meaning antivirus tools have not yet caught its signature. The low detection rate highlights the risk of relying solely on automated tools for protection.  If you visited dexsyncs.pages.dev or connected your wallet, disconnect immediately using your wallet’s “Disconnect” or “Reject all” function. Do not approve any pending transactions. Clear your browser cache and consider revoking any hidden permissions via tools like Revoke.cash. Report the domain and wallet addresses to PhishDestroy to help block future attacks. Always verify URLs through trusted databases before interacting with crypto platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.53

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a8dd5402-8c96-41bb-9d4e-f62b06dffe71
- PhishDestroy: https://phishdestroy.io/domain/dexsyncs.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/dexsyncs.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dexsyncs.pages.dev/
Last updated: 2026-03-24