# synchpanel.pages.dev — MALICIOUS

> PhishDestroy identifies synchpanel.pages.dev as a Google Drive credential phish with a 5/95 VirusTotal score. Check the full report.

## Summary
synchpanel.pages.dev is an active phishing domain impersonating Google Drive authentication systems to harvest user credentials. This domain is part of a generic phishing campaign distributing a credential drainer kit designed to mimic Google's login interface. The threat aims to trick users into entering their Google credentials under the guise of accessing shared documents or files, then exfiltrating the stolen data.

This domain was flagged by 5 of 95 VirusTotal security vendors and resolved to IP 188.114.97.3. It was registered through Cloudflare, Inc., and currently holds a valid SSL certificate issued by Google Trust Services. It appears on one security blocklist and has not been flagged by Google Safe Browsing as of the latest scan.

The campaign remains active with an elevated risk level. Immediate actions include blocking the domain at the network and DNS levels and educating users to verify URLs before entering credentials. While ScamSniffer has already blocked this domain, users in unprotected networks remain at risk. Regular monitoring of this domain and its associated infrastructure is recommended to preempt further exploitation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/610f2af4-21ca-4cd9-b342-15e7270a520b
- PhishDestroy: https://phishdestroy.io/domain/synchpanel.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/synchpanel.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/synchpanel.pages.dev/
Last updated: 2026-03-22