discord-sync[.]pages[.]dev

On 2026-07-29 the domain discord-sync.pages.dev was observed actively resolving to the IP address 188.114.96.3. The domain is hosted behind Cloudflare, Inc. and uses the Cloudflare authoritative nameservers bayan.ns.cloudflare.com and demi.ns.cloudflare.com. VirusTotal scans have returned detections from five of ninety‑one security vendors, indicating that a subset of scanners recognize malicious behaviour associated with the host.

The domain appears on a single external security blocklist and is currently listed by the PhishDestroy mitigation service, confirming that at least one industry‑wide phishing filter has taken action to block traffic to the host. The registrar information points to Cloudflare, which is commonly used as a front‑end service for both legitimate and abusive sites; no further registrant details are exposed. No public TLS certificate metadata, HTTP response codes, or page‑title information were supplied, so the presence of a valid HTTPS certificate or the content of the landing page remains unverified.

The limited available evidence – IP resolution, blocklist presence, partial VirusTotal detections, and active status – collectively supports an elevated risk rating for the domain. Defenders should add discord-sync.pages.dev to DNS‑based deny lists, monitor outbound connections to 188.114.96.3, and ensure that web‑gateway or proxy solutions reference the PhishDestroy feed for real‑time blocking. Because the underlying content has not been publicly analysed, additional investigation, such as sandboxed retrieval of the landing page, is recommended to confirm the exact phishing vector and to gather forensic artefacts for attribution.