Is bdagnetwork.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website bdagnetwork.live is a very recently registered site with network-style branding. When it was analysed, its landing page returned a security-warning interstitial for suspected phishing instead of ordinary site content. Its products, services and business model therefore cannot be established from the captured material, and it presents no confirmed legitimate commercial purpose.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The domain is blacklisted. Several major security vendors independently flag it as malicious, and the volume of detections is far above the level that normally indicates a genuine threat rather than a stray false positive. Separately, the page captured at the site's root was a warning interstitial rather than genuine site content, and web-archive records already associate the domain with phishing. No conflicting legal-entity identities were found, and no brand impersonation was confirmed. The elevated risk rests on external reputation, not on identity inconsistency. The behavioural sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms, or credential posts to third-party hosts, but it did record a very high share of outbound requests to external destinations and numerous console errors. Nothing in the available evidence offsets the threat detections. Evidence:

• Homepage: the captured page was a suspected-phishing warning interstitial (HTTP 403) rather than site content.
• Reputation: multiple leading security vendors currently flag the domain as malicious, and it appears on an external blacklist.
• Archive provenance: 1 archive snapshot, dated 2026-08-31 (1 year tracked), and the archive record carries a prior phishing association.
• Behavioural sandbox (3 of 3 runs completed): 21 external XHR/fetch calls and 9 external POST requests (about 91% of requests going to external hosts), 18 console errors, and no wallet, clipboard or hidden-form activity.

Regulatory Verification Notes

No licensing, registration number, or legal-entity information is available to assess, and no third-party broker record matches the domain. This is treated as a verification gap, not as evidence of wrongdoing, and it carries weight here only because it sits alongside the confirmed threat detections. The domain was registered very recently through Dynadot, with owner details incomplete, so ownership and governance opacity apply: the real-world operator cannot be independently connected to the site. The valid TLS certificate shows only that the connection is encrypted. It says nothing about who runs the site or whether it is safe. Evidence:

• Registration: domain created 2026-08-23 (about 0.17 years old, roughly two months), expiring 2027-08-23, registrar Dynadot Inc.
• Transport security: DV certificate issued by WE1, valid to 2027-01-19 (about 85 days remaining at analysis).
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party broker dataset: no match for this domain, so no regulatory standing can be drawn from it.

What to Verify Next

Before any interaction, confirm independently whether the domain is a legitimate property of a known organisation by checking its official channels directly, not through links on this site. If an organisation claims this domain, request written confirmation of its legal entity and any licences, and check them against the relevant public registry. Check the current status of the security-vendor flags with the vendors themselves. The owner may be a victim of compromise, so the site should only be reconsidered after a remediation notice or a clean re-scan. Evidence:

• Registration: a domain created 2026-08-23 gives little operating history to rely on.
• Archive record: only 1 snapshot exists (2026-08-31), so there is no archive evidence of a legitimate prior use.
• Homepage: the warning interstitial means no verifiable legal or contact details were captured.

Summary Verdict

The assessment is a critical-risk posture. Confirmed external threat detections, a negative archive association, and a brand-new, opaquely registered domain converge into a clearly adverse picture. Technical hygiene such as valid encryption does not change that outcome. Operator identity is unverified, and the site cannot be treated as trustworthy on the available evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, with all four observed addresses (two IPv4, two IPv6) belonging to Cloudflare edge servers in AS13335. No origin server address was observable. Bot protection is active, and the site's DNS shows low-TTL behaviour typical of CDN delivery. This setup is mitigating only: it shows a mainstream provider fronts the site, but it hides the real hosting location and cannot offset the reputation findings.

Closing Assessment

The domain should be avoided for account login, credential entry, wallet connection, payments, or downloads. Any necessary contact should be limited to passive viewing from an isolated, protected environment. Security teams should consider blocking the domain pending a clean independent re-assessment.