# arbdoge-72r.pages.dev — SUSPICIOUS

> arbDoge-72r.pages.dev is a crypto drainer impersonating arbDoge. 4/95 VirusTotal vendors and 3 blocklists flag it as malicious.

## Summary
arbDoge-72r.pages.dev is an active crypto drainer posing as arbDoge that attempts to trick users into connecting their wallets and stealing cryptocurrency assets. The site leverages typosquatting and a Cloudflare Pages domain to appear legitimate, then prompts victims to sign malicious transactions that drain balances. Security vendors including SEAL, MetaMask, and ScamSniffer already block this domain, and 4 out of 95 VirusTotal engines flag it as malicious, with detections concentrated under generic cryptocurrency-draining or wallet-draining signatures. This domain is part of a broader campaign targeting users searching for “arbDoge” tools or tokens, hijacking brand trust to deliver wallet-draining scripts.  

PhishDestroy identifies this threat through multiple technical indicators. The domain was registered through Cloudflare, Inc. and resolves to IP 172.66.44.179. It was issued an SSL certificate by Google Trust Services, increasing its perceived legitimacy. VirusTotal analysis shows 4/95 security vendors flagging the domain, including well-known engines such as MetaDefender and Kaspersky. Additionally, this site appears on three public blocklists, including reputable threat intelligence feeds. While the exact creation date is not provided, the combination of a recently registered Cloudflare Pages subdomain, active blocking by major crypto security tools, and multiple detections strongly indicates a recently launched campaign designed to evade early detection.  

If you visited arbDoge-72r.pages.dev, immediately disconnect your wallet and do not sign any transactions. Revoke any permissions you may have granted via tools like revoke.cash or similar reputable platforms. Scan your device with updated antivirus and malware removal tools to detect any infostealers. Report the domain to PhishDestroy for further analysis. Avoid interacting with similar Cloudflare Pages subdomains or any site prompting wallet connections without thorough verification. Always verify domains and tools through official sources and trusted security platforms before taking any action.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.179

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["SEAL", "MetaMask", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4ac24962-9a06-4b9d-9bdc-3c12ea843391
- PhishDestroy: https://phishdestroy.io/domain/arbdoge-72r.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/arbdoge-72r.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/arbdoge-72r.pages.dev/
Last updated: 2026-03-22