# shibashootout-com.pages.dev — SUSPICIOUS

> PhishDestroy alerts users to crypto drainer shibashootout-com.pages.dev, active since creation and flagged by VirusTotal with 1/95 detections.

## Summary
PhishDestroy identifies the domain shibashootout-com.pages.dev as an active crypto-draining phishing site designed to steal cryptocurrency from unsuspecting visitors. The page impersonates legitimate crypto giveaways or wallet integrations, tricking users into connecting their wallets under the guise of claiming rewards or completing a transaction. Once a victim approves the malicious smart contract, funds are drained directly from the connected wallet without further interaction, leaving users with irreversible losses.  This domain was flagged by VirusTotal with just 1 out of 95 security vendors detecting it, highlighting how new and evasive this threat is. It was created recently and registered through Cloudflare, Inc., leveraging Google Trust Services for SSL certificates and resolving to IP address 188.114.96.3. Google Safe Browsing has already classified it under “SOCIAL_ENGINEERING,” confirming its malicious intent and attempt to deceive users through impersonation.  If you visited shibashootout-com.pages.dev, immediately disconnect your wallet from any connected websites through your wallet interface, revoke any suspicious token approvals, and consider transferring remaining funds to a new wallet via a clean device. Run a full antivirus scan on your system, rotate all passwords used on the affected device, and report the incident to your wallet provider and relevant crypto platforms. Never approve unsolicited wallet connections or transactions, and always verify links using PhishDestroy before interacting with crypto-related sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/56cef013-b0ad-4e53-a127-f66a4478137c
- PhishDestroy: https://phishdestroy.io/domain/shibashootout-com.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/shibashootout-com.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/shibashootout-com.pages.dev/
Last updated: 2026-03-24