purchase2-blockdag-networks[.]pages[.]dev

This domain is currently under investigation for banking phishing activity, specifically targeting users through fraudulent cryptocurrency investment schemes. The page mimics legitimate blockchain services to harvest credentials and financial information, posing a direct risk to users engaging with purported BDAG coin purchases or mining operations. Analysis indicates the domain was registered on July 25, 2024, through Cloudflare, Inc., and resolves to the IP address 172.66.44.240, located in Canada. Despite its recent creation, the domain appears on two security blocklists and has been flagged by at least two independent threat intelligence sources. VirusTotal currently reports 0/95 detections, suggesting the infrastructure remains undetected by most security vendors. The SSL certificate is issued by Google Trust Services (WE1), which may lend a false sense of legitimacy to unsuspecting users. Mitigation requires immediate blocking of the domain and associated IP address within enterprise and consumer security controls. Network administrators should monitor for connections to 172.66.44.240 and inspect SSL certificates matching Google Trust Services WE1 for similar fraudulent patterns. Users should be educated to verify domain authenticity before entering financial or login credentials, particularly for cryptocurrency-related transactions. Suspicious activity should be reported to relevant financial institutions and cybersecurity response teams for further analysis.