claimblocksdag[.]bdag[.]site

Analysis of the domain claimblocksdag.bdag.site indicates it was associated with a crypto scam operation, specifically classified as a crypto drainer. The domain was registered on March 7, 2026, through HOSTINGER operations, UAB, and resolved to the IP address 2.57.91.24, hosted under AS47583 (Hostinger International Limited) in Cyprus. Nameservers were configured as ns1.dns-parking.com and ns2.dns-parking.com, a common setup for low-cost or disposable hosting environments. No SSL certificate was detected, which is atypical for legitimate financial or crypto-related services but consistent with hastily deployed scam infrastructure.

The page title, 'Become a Part Of BlockDAG Network | Buy BDAG Coins & Miners,' suggests an attempt to impersonate or exploit the BlockDAG brand, a known cryptocurrency project. While the domain is currently offline, it appeared on at least one security blocklist and was flagged by PhishDestroy. Notably, the domain was scanned by 94 vendors on VirusTotal, with no detections at the time of analysis; however, the absence of detections does not confirm safety, particularly given the domain's recent registration and offline status. Infrastructure analysis reveals patterns consistent with short-lived scam domains: use of a low-cost registrar, absence of SSL, and reliance on generic DNS parking services.

Defenders should treat this domain as malicious based on its association with crypto drainer activity, its presence on security blocklists, and its hosting context. Organizations are advised to monitor for related domains registered under similar patterns, particularly those using the 'bdag.site' subdomain or targeting cryptocurrency users. Further investigation into the IP range 2.57.91.0/24 may reveal additional malicious infrastructure.