MALICIOUS — CRITICAL
biockdag[.]network
The domain biockdag.network is a generic phishing site posing an elevated risk of financial or credential theft.
- VirusTotal
- 2/95
- Blocklists
- 4 · ScamSniffer, Polkadot
- Verfügbarkeit
- Inhalt nicht verfügbar · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
biockdag.network — Inhalt nicht verfügbar (HTTP 502). Markenidentität: Genericcrypto; Betrugstyp: Fake Airdrop. Zusammenfassung der Beweislage: VirusTotal 2/95 (alphaMountain.ai, SOCRadar); URLQuery 1 alert; URLScan malicious verdict; 4 external blocklist matches; PhishDestroy score 83/100. Registrar: Dynadot.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain biockdag.network is a generic phishing site posing an elevated risk of financial or credential theft. It does not impersonate a specific brand but presents itself as a cryptocurrency presale platform under the name 'BlockDAG,' targeting users with promises of an ICO or presale. As of the latest verification, biockdag.network has been taken offline, though prior activity indicates it was actively used for phishing attempts.
Technical indicators confirm the suspicious nature of biockdag.network. The domain was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and SOCRadar, and appears on 5 security blocklists, such as PhishDestroy, ScamSniffer, and Polkadot. It was registered through Dynadot LLC on February 21, 2026, and resolved to the IP address 104.168.156.93, hosted by Hostwinds LLC in the US. No SSL certificate was issued for the domain, and its nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. The observed page title, 'BlockDAG | Best Crypto ICO | Layer 1 Crypto Presale 2025 Now LIVE!,' aligns with typical phishing lures in the cryptocurrency space.
Users who interacted with biockdag.network should assume their credentials or wallet details may have been compromised. For credential-based phishing, immediately change passwords for any accounts accessed via the site and enable two-factor authentication. If cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new wallet. Report the domain to relevant platforms, such as Google Safe Browsing, the registrar (Dynadot LLC), or local cybercrime authorities to aid in mitigation efforts.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | wasteurl.fake |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.