shufbebfybewhjewbfjhe[.]pages[.]dev

The domain shufbebfybewhjewbfjhe.pages.dev is a confirmed phishing site that specifically targets users of the Arbitrum blockchain by impersonating the official Arbitrum airdrop eligibility checker. The page title, "Arbitrum — Check your airdrop eligibility to govern Arbitrum," is designed to trick visitors into connecting their wallets or entering sensitive information, which would then be used to drain their cryptocurrency assets. This is a classic brand impersonation scam that exploits excitement around airdrop events to harvest credentials or private keys.

Evidence gathered by PhishDestroy shows that this domain is highly suspicious. VirusTotal reports that 9 out of 95 security vendors flag this domain as malicious, indicating a consensus among security tools. The domain was registered on April 18, 2026, through Cloudflare, Inc., a common registrar for malicious sites due to its ease of use and anonymity. It resolves to IP address 172.66.47.105 and appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services, which is legitimate but does not attest to the site's trustworthiness. Despite being active, these indicators strongly suggest the site is a phishing operation.

If a user has visited this domain, they should immediately disconnect any connected wallet, change their wallet passwords and seed phrases, and run a security scan on their device. They should also report the domain to the relevant blockchain security teams and monitor their accounts for unauthorized transactions. To verify the legitimacy of any airdrop, users should always visit the official project website directly and use tools like PhishDestroy to check domain reputation before interacting. PhishDestroy continues to track this domain and will update its status as necessary.