staking-bdagscan[.]com

The domain staking-bdagscan.com was created on February 23, 2026 and is registered through NiceNIC International Group Co., Limited. It resolves to the IP address 172.67.160.93, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are blair.ns.cloudflare.com and theo.ns.cloudflare.com, indicating that the domain is fully delegated to Cloudflare’s DNS infrastructure. No SSL certificate was observed for the site, and the page title returned by the HTTP response is the generic string "Just a moment...".

VirusTotal reports a single positive detection out of 93 scanned security vendors, confirming that at least one vendor has flagged the domain as malicious. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy feed, reinforcing its classification as a threat. Intelligence sources label the activity as an investment scam employing an Airdrop phishing kit, suggesting that the site likely attempts to lure victims with promises of cryptocurrency airdrops or investment returns. The current status is listed as taken offline, but historical evidence shows the domain was actively serving malicious content prior to takedown.

Defenders should continue to block the domain at network perimeters, update DNS filtering policies to include the observed nameservers and IP range, and monitor for any re‑registration attempts. Because the site lacks TLS, any future resurrection would be observable via HTTP probing. Analysts should also watch for related domains that reuse the same registrar or Cloudflare hosting, as threat actors frequently spin up new aliases after takedown. The limited detection count and single blocklist entry indicate that broader visibility may be lacking, so threat‑intel sharing platforms should be consulted for additional indicators of compromise.