bdag[.]club

This domain, bdag.club, is identified as a cryptocurrency presale phishing site specifically impersonating BlockDAG, a Layer 1 blockchain project. The domain currently holds an offline status but was actively used to deceive investors by promoting a fraudulent token presale under the guise of a legitimate blockchain offering. Analysis indicates the site employed social engineering tactics, including a fabricated presale countdown and investment urgency, to exploit victims seeking early access to cryptocurrency investments. Infrastructure analysis reveals the domain was registered on April 05, 2024, through TLD Registrar Solutions Ltd. It resolved to the IP address 172.67.159.145 and utilized an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. The domain is flagged by 4 of 95 security vendors on VirusTotal and appears on one security blocklist. Gridinsoft assigned a trust score of 0 out of 100, and AlienVault OTX includes the domain in two threat intelligence pulses. The page title, 'BlockDAG | Layer 1 Presale Now LIVE!', directly mimics the branding of the legitimate BlockDAG project to enhance credibility. The domain has since been taken offline, but the threat remains relevant due to the potential for re-emergence under similar infrastructure or branding. Organizations and individuals are advised to monitor for newly registered domains impersonating cryptocurrency projects, particularly those leveraging presale or investment urgency themes. Blocklisting the domain and associated IP address (172.67.159.145) is recommended for network-level protection. Users should verify cryptocurrency investment opportunities through official project channels and avoid interacting with unsolicited presale promotions. Security teams are encouraged to review logs for connections to the domain or IP to identify potential prior exposure.