purchase2-blockdags-networks[.]pages[.]dev
“BlockDAG | Best Crypto ICO | Layer 1 Crypto Presale 2025 Now LIVE!”
purchase2-blockdags-networks.pages.dev — Conteúdo indisponível. Representação da marca: Across; Tipo de golpe: Crypto Drainer. Resumo das evidências: VirusTotal 13/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CRDF); 3 external blocklist matches (Polkadot, Enkrypt, Codeesura); PhishDestroy score 90/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis indicates that the domain purchase2-blockdags-networks.pages.dev is currently offline, returning HTTP 403, and has been flagged by multiple security vendors as a wallet/seed phishing operation. The page title observed before takedown read "BlockDAG | Best Crypto ICO | Layer 1 Crypto Presale 2025 Now LIVE!", which aligns with the Token Presale phishing kit identified in the intelligence. The site impersonates the brand "across", suggesting an attempt to lure victims by referencing that brand. Technical inspection shows the domain resolves to the Cloudflare‑owned address 172.66.46.244 located in the United States under ASN 13335.
The SSL certificate is issued by Google Trust Services (WE1), and the site employed HSTS, Google Analytics, and HTTP/3, confirming a modern web stack. VirusTotal scans recorded 13 positive detections out of 93 antivirus engines, and the domain appears on four public blocklists. It has been specifically blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. The registrar is listed as Cloudflare, Inc., and the authoritative name servers include adi.ns.cloudflare.com, chris.ns.cloudflare.com, desiree.ns.cloudflare.com, and karl.ns.cloudflare.com.
A Gridinsoft trust score of 0 / 100 further underscores its malicious nature. Because the site is presently inaccessible, the exact content cannot be verified, but the combination of the deceptive title, token‑presale kit, and the high‑confidence detections strongly point to a credential‑stealing campaign targeting cryptocurrency wallets. Defenders should immediately add purchase2-blockdags-networks.pages.dev to network‑level block lists, monitor the associated IP range and Cloudflare name servers for future subdomains, and enforce endpoint protection policies that flag wallet‑seed entry forms. Continuous feed updates from the listed security vendors and regular VirusTotal re‑scans are recommended to capture any re‑hosting attempts.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of purchase2-blockdags-networks.pages.dev · checked Apr 24, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo