blockdagfixhub[.]pages[.]dev

blockdagfixhub.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first recorded this hostname on Feb 26, 2026. The hostname explicitly references BlockDAG; stored content metadata identifies the same apparent target. The stored content classification is brand impersonation. The assembled evidence scores 58/100 (elevated).

Two independent sources are positive: VirusTotal and ScamSniffer. VirusTotal recorded 1 detections among 93 engines: Gridinsoft on Jul 18, 2026 at 18:45 UTC. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection on Feb 26, 2026 at 15:26 UTC. Google Safe Browsing returned no flag on Feb 26, 2026 at 16:31 UTC. URLScan completed without a malicious verdict (score 0) on Mar 24, 2026 at 12:26 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:01 UTC; content was unavailable. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is cloudflare. Captured page title: “Blockdag Hub RPC”. DOM analysis completed on Jul 29, 2026 at 04:08 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 2, 2026 at 04:08 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as BlockDAG-themed brand impersonation.