sync-portal[.]pages[.]dev

This phishing domain, sync-portal.pages.dev, specifically targets blockchain users by imitating a legitimate portal for managing coins and NFTs. Despite its current offline status, the domain once posed a significant threat, as evidenced by its detection by 5 out of 91 VirusTotal vendors. The domain was registered through Cloudflare, Inc., and hosted on an IP address located in the United States.

The website's page title, "Easily Manage your Coins and NFTs in one place | BLOCKCHAINS MAINNET," suggests a focus on deceiving users into believing they are accessing a genuine blockchain management platform. This tactic is designed to harvest sensitive information from unsuspecting users, such as wallet credentials and private keys, which could lead to financial losses.

PhishDestroy first identified this domain on May 30, 2026, and it was subsequently added to public blocklists, including PhishDestroy's own. The platform risk score of 68 out of 100 highlights the potential danger this domain posed before it was taken down. The swift action to block and take down the site underscores the importance of early detection and intervention in mitigating phishing threats. The domain's short-lived activity period exemplifies the rapid lifecycle of phishing operations, emphasizing the need for continuous vigilance and timely response.