Analysis of the domain bdagchain.live shows it was registered on July 26, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on Cloudflare infrastructure, using the authoritative nameservers glen.ns.cloudflare.com and rachel.ns.cloudflare.com. DNS resolution points to the IP address 104.21.17.196, which is part of Cloudflare's edge network and does not reveal a direct backend host. The domain appears on a single security blocklist and has been flagged by the PhishDestroy service, indicating that at least one anti‑phishing feed considers it malicious.
VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation vendors, none of which have raised a detection; however, the lack of a flag does not constitute evidence of benign intent, especially given the active blocklist entry. No public information is available regarding SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange references, page title, or any observed landing page content. Consequently, the precise phishing lure or targeted brand remains undetermined.
Defenders should treat bdagchain.live as a high‑confidence malicious indicator. Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for outbound resolution to 104.21.17.196, and enforcing web‑proxy or firewall rules that deny HTTP/HTTPS traffic to the domain. Continuous re‑evaluation is advised, as the threat landscape may evolve and additional intelligence—such as page content or observed credential‑stealing campaigns—could emerge.