demo[.]berachainbuild[.]xyz

Demo.berachainbuild.xyz, impersonating Berachain, has been flagged by 8 out of 93 vendors on VirusTotal. The site, now offline, was hosted in the US under Akamai Technologies. It attempted to deceive users by mimicking the Berachain brand and also displayed GoDaddy branding.

The domain was created on February 21, 2026, and PhishDestroy detected it shortly after on February 26, 2026. Despite its brief existence, the domain managed to attract attention due to its impersonation tactics. The SSL certificate was issued by Go Daddy Secure Certificate Authority - G2, adding a layer of perceived legitimacy to the scam.

Demo.berachainbuild.xyz's presence on a public blocklist, specifically PhishDestroy's, indicates its malicious intent. The platform risk score of 70/100 underscores the threat level it posed during its active period. The rapid takedown of this domain highlights the effectiveness of early detection and response efforts in mitigating phishing threats.