app-blockdag[.]network

app-blockdag.network was registered on 21 February 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and immediately pointed to the Cloudflare‑owned address 172.67.189.235 (AS13335, United States). The site presented the page title “BlockDAG | Layer 1 Crypto Presale 2025 Now LIVE!”, which aligns with the listed scam type “Crypto Scam”. The domain is associated with a brand‑impersonation campaign that targets the generic “Across” brand, as indicated in the intelligence feed. Security‑vendor analysis on VirusTotal shows that 3 of 95 scanners flagged the domain, confirming malicious intent, and the domain appears on at least one external blocklist.

PhishDestroy has taken the site offline, and the current status is reported as “taken offline”. The SSL certificate is identified as “WE1”, and the Gridinsoft trust score is 0 out of 100, indicating a complete lack of trust. The site’s infrastructure relies on Cloudflare’s edge network, which can obscure the underlying hosting provider and complicate takedown efforts. Defenders should update URL filtering rules to block any resolution to 172.67.189.235 that includes the host name app-blockdag.network, and add the domain to internal blocklists.

Since the page title explicitly references a presale event, monitoring for similar “Crypto Presale” keywords in outbound traffic may help detect attempts to lure users. The low trust score and the presence on a known blocklist justify immediate quarantine of any emails or messages containing the URL. Continuous monitoring of VirusTotal and other multi‑engine scanners is advised, as additional detections may emerge. Because the site is already offline, the immediate risk is reduced, but the registration pattern suggests the possibility of future re‑deployment; therefore, security teams should retain the indicator of compromise (IOC) for future threat‑intel correlation.