blockdaglive[.]network

This domain is flagged as a confirmed brand impersonation site targeting BlockDAG, a cryptocurrency project. Analysis indicates the site was designed to deceive users by mimicking the legitimate BlockDAG platform, likely to facilitate crypto asset theft or fraudulent investment schemes. The specific threat type is brand impersonation with potential crypto drainer functionality, given the context of the targeted brand. Infrastructure analysis reveals the domain blockdaglive.network was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolved to IP address 104.21.73.78 and employed technologies including HSTS, Cloudflare, and HTTP/3. The site displayed a page title of 'Lovable App' and used an SSL certificate issued by Google Trust Services. Despite its deceptive nature, the domain showed 0 detections out of 95 on VirusTotal, though it appeared on three security blocklists. Additional blocking was implemented by MetaMask, SEAL, and PhishDestroy. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The domain is currently offline, but residual risk remains for users who may have interacted with it prior to takedown. Mitigation steps for this brand impersonation threat include immediate blacklisting of the domain and associated IP across all security gateways. Organizations should monitor for any residual DNS queries or cached redirects to blockdaglive.network. Users who accessed the site should be advised to revoke any wallet permissions granted during interaction and scan devices for malware. Cryptocurrency platforms should implement additional verification steps for transactions referencing BlockDAG to prevent fraudulent transfers. Security teams are recommended to review logs for connections to 104.21.73.78 and correlate with any suspicious crypto wallet activity.