blockdag-claimporter[.]pages[.]dev

The domain blockdag-claimporter.pages.dev is identified as a crypto drainer and is currently active. It appears to impersonate a legitimate cryptocurrency platform, specifically BlockDAG, which is known for its Layer 1 blockchain technology and ICO presales.

Analysis indicates that the domain was created on February 11, 2026, and is registered through Cloudflare Pages. The domain resolves to the IP address 172.66.47.138 and is secured with an SSL certificate issued by Google Trust Services / WE1. Despite the presence of a trusted SSL certificate, the domain is flagged by 11 of 95 security vendors on VirusTotal, suggesting a high level of suspicion. The domain appears on 1 security blocklist, specifically PhishDestroy, which further corroborates the potential threat. The page title, 'BlockDAG | Best Crypto ICO | Layer 1 Crypto Presale 2025 Now LIVE!', is indicative of an attempt to lure users into a fraudulent presale, potentially leading to the theft of cryptographic assets or personal information.

Given the current active status of the domain and the high risk level associated with it, users are advised to avoid interacting with blockdag-claimporter.pages.dev. Security professionals should monitor the domain for further activity and consider blocking it at the network level to prevent potential compromise. Additionally, users should be educated on the signs of crypto drainer and brand impersonation attacks to enhance their security awareness.