shiba-inu-airdrop[.]pages[.]dev

The domain shiba-inu-airdrop.pages.dev is currently operating as an active brand impersonation phishing site targeting users of the cryptocurrency exchange Bitget. Analysis confirms the domain is designed to deceive victims into believing they are interacting with a legitimate Shiba Inu token airdrop, a common tactic used to harvest credentials or distribute malicious payloads. The page title, 'Claim Your Shiba Inu Airdrop: Complete Guide | Shiba Inu Airdrop,' reinforces the fraudulent narrative by mimicking official promotional content. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 16, 2025, and resolves to the IP address 172.66.47.175, located within Cloudflare's US-based autonomous system (AS13335). The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider often exploited by threat actors to lend credibility to malicious sites. Security telemetry indicates the domain is flagged by 1 of 95 vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. Despite these detections, the domain remains operational and accessible at the time of this report. The risk posed by this domain is classified as high due to its active exploitation of brand trust and the potential for financial or credential theft. Organizations and individuals are advised to block the domain and IP address at the network level, update endpoint protection rules to include this indicator, and conduct user awareness training to recognize similar phishing schemes. Cryptocurrency users should verify airdrop promotions exclusively through official exchange channels and avoid interacting with unsolicited offers, particularly those hosted on newly registered or third-party domains.