# presales-blockdag.network — SUSPICIOUS

> PhishDestroy identifies presales-blockdag.network as a fake BlockDAG investment portal. This domain poses a crypto scam risk with a 3/95 VirusTotal detection.

## Summary
PhishDestroy identifies presales-blockdag.network as an elevated-risk BlockDAG pre-sale phishing site actively distributing crypto investment scams. The domain masquerades as a legitimate presale portal to trick users into depositing BlockDAG tokens or cryptocurrency into attacker-controlled wallets.

This domain was flagged with a VirusTotal detection rate of 3/95 security vendors, indicating low but present consensus on its malicious nature. It resolves to IP 104.21.59.3 and was created on March 13, 2026 via NICENIC INTERNATIONAL GROUP CO., LIMITED. The presence of a valid Let's Encrypt SSL certificate enhances its false legitimacy, making it more effective at deceiving users. The domain remains unlisted on major blocklists, compounding its threat potential due to lack of widespread visibility.

To mitigate exposure, users must avoid visiting presales-blockdag.network entirely. Enterprises should block the domain and IP (104.21.59.3) at the network perimeter. Report the domain to your browser vendor, PhishDestroy, and local CERT teams for takedown. Educate stakeholders on verifying official presale channels and using hardware wallets for token purchases.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-13 14:31:44
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.59.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f9630f40-6121-49e4-8d5f-943eb05da626
- PhishDestroy: https://phishdestroy.io/domain/presales-blockdag.network/
- LLM endpoint: https://phishdestroy.io/domain/presales-blockdag.network/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/presales-blockdag.network/
Last updated: 2026-03-23