claimblockdag[.]site

The domain claimblockdag.site is flagged for brand impersonation targeting BlockDAG in a cryptocurrency scam. Registered on February 21 2026 through OwnRegistrar Inc the domain remains active on July 12 2026 and resolves to IP address 188.114.97.3 in the United States under AS13335 Cloudflare Inc. Analysis indicates the domain uses nameservers audrey.ns.cloudflare.com and lewis.ns.cloudflare.com while presenting a page title of Just a moment... and returning HTTP status 403. Infrastructure analysis reveals deployment of Cloudflare along with HTTP/3 and an SSL certificate issued by Google Trust Services under the WE1 profile.

Detection metrics include a Gridinsoft trust score of 0/100 with the domain appearing on 1 security blocklist and flagged by 4 out of 95 security vendors on VirusTotal. The threat classification specifies brand impersonation with an explicit cryptocurrency scam type and current status listed as still active. The domain is also noted as blocked by PhishDestroy. These data points establish observable evidence of malicious infrastructure without reliance on content behind protective layers.

Defenders should incorporate the exact IP 188.114.97.3 and the listed nameservers into blocklists while monitoring for related registrations under the same registrar. The domain name itself combined with the brand target and scam type provides clear indicators for proactive filtering. Uncertainty persists on the precise landing page content due to the observed 403 status and Cloudflare protection though the impersonation pattern remains consistent with the documented threat type.

Technical response actions include verification of the registration date February 21 2026 against internal watchlists and correlation of the US-based IP location with other active threats sharing the same autonomous system. Continued observation of the domain status is warranted given its confirmed active state and multiple independent detections.