syncwalletviz[.]pages[.]dev

Analysis of the domain syncwalletviz.pages.dev indicates that it is hosted on Cloudflare Pages and resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. in Canada. The site serves HTTP 200 responses and presents a page titled “Document”. The SSL certificate is issued by Google Trust Services under the WE1 identifier, consistent with Cloudflare’s default TLS provisioning. The domain appears on a single security blocklist and has been flagged by PhishDestroy, suggesting prior malicious activity. VirusTotal records show the domain was scanned by 91 antivirus engines without any current detections; however, the absence of detections does not confirm benign intent. The threat type assigned is a crypto drainer, but the public content provides no further detail on the specific draining mechanism or targeted wallets. Consequently, the operational purpose of the site remains uncertain beyond the classification. Defenders should block network connections to the IP 188.114.96.3 and add the fully qualified domain name to DNS blocklists. Continuous monitoring of TLS certificate changes, HTTP responses, and any future VirusTotal submissions is recommended to detect shifts in behavior.