blockdagpresale-claims[.]pages[.]dev

This domain, blockdagpresale-claims.pages.dev, is identified as a crypto drainer site. It poses a significant threat to users by attempting to steal cryptocurrencies through deceptive means, such as fake coin purchase pages or malicious scripts that siphon funds from wallets.

Analysis indicates that the domain was created on June 30, 2024, and is currently registered through Cloudflare Pages. The site resolves to the IP address 172.66.44.126 and uses an SSL certificate issued by Google Trust Services / WE1. Despite its recent creation, the domain appears on one security blocklist and has been flagged by PhishDestroy. However, it has not yet been detected by VirusTotal, with 0 out of 95 engines identifying it as malicious. This suggests that the threat actors are using evasion techniques to avoid detection.

If a user has visited this domain, they should immediately check their cryptocurrency wallets and any associated accounts for unauthorized transactions. It is recommended to update all related passwords and enable multi-factor authentication (MFA) to secure their accounts. Users should also monitor their financial statements and report any suspicious activity to their cryptocurrency exchange or financial institution. Reporting the domain to relevant security authorities and organizations can help in further investigation and mitigation of the threat.