app[.]synaspeprotocol[.]com

This domain, app.synaspeprotocol.com, is flagged as a cryptocurrency-focused phishing site designed to harvest wallet credentials and private keys. Analysis indicates no legitimate association with the genuine Synapse Protocol or its decentralized finance infrastructure. The site likely employs a wallet drainer kit, common in cryptocurrency phishing campaigns, to automatically siphon funds upon user interaction. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc., an unusual creation date that may indicate domain squatting or preemptive registration for malicious purposes. VirusTotal detection shows 14 out of 95 security vendors have flagged the domain as malicious, while it appears on one security blocklist. The page title, identical to the domain name, suggests a lack of effort to mimic legitimate branding. No Google Safe Browsing (GSB) detection was recorded at the time of assessment, though this does not preclude prior or future classification. The domain is currently offline, likely due to takedown or abandonment following detection. It was blocked by PhishDestroy, indicating active monitoring and response by security entities. Despite its offline status, residual risk remains for users who may have interacted with the site prior to takedown, particularly if wallet credentials were exposed. Users are advised to revoke any connected dApp authorizations, monitor transaction histories for unauthorized activity, and verify future interactions with only the official Synapse Protocol domain.