# syncpaneldapp.pages.dev — SUSPICIOUS

> syncpaneldapp.pages.dev hosts a crypto drainer phishing site flagged by 1/95 VirusTotal scanners. Targets cryptocurrency users with fake panel login.

## Summary
PhishDestroy identifies an active crypto drainer phishing campaign operating from syncpaneldapp.pages.dev, a domain weaponized to steal cryptocurrency assets via deceptive login portals. This infrastructure mimics legitimate crypto dashboard services to trick users into connecting malicious wallets and authorizing fraudulent transactions. Threat actors leverage Cloudflare Pages to host fake panels that harvest seed phrases, private keys, and transaction approvals, resulting in irreversible asset loss. Analysis of this domain reveals a high-risk attack chain designed to impersonate legitimate crypto management platforms and drain user funds without consent.

This domain was flagged by PhishDestroy and ScamSniffer after only 1 out of 95 VirusTotal security vendors detected its malicious intent. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.44.250 and uses a Google Trust Services SSL certificate to appear legitimate. It appears on one active security blocklist and was created recently, indicating a fast-moving campaign. The low detection rate highlights the evasiveness of this threat, which avoids traditional signature-based defenses through the use of reputable hosting and encryption.

Users who visited syncpaneldapp.pages.dev should immediately disconnect any connected crypto wallets and revoke any unauthorized transaction approvals via blockchain explorers or wallet interfaces. Do not enter any credentials, seed phrases, or private keys into this site. Clear browser cache and cookies, then run a full antivirus scan. Report the domain to your cybersecurity team and relevant blockchain security platforms. This campaign is active and evolving—stay vigilant and verify all crypto-related domains before interaction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.250

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8897ea87-401e-4d84-a657-97f12900786d
- PhishDestroy: https://phishdestroy.io/domain/syncpaneldapp.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/syncpaneldapp.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/syncpaneldapp.pages.dev/
Last updated: 2026-03-22