guve[.]bj

guve.bj entered the PhishDestroy evidence set on Jun 21, 2026. The stored content classification is generic phishing. The assembled evidence scores 91/100 (critical).

Two independent sources are positive: VirusTotal and URLQuery. VirusTotal recorded 7 detections among 91 engines: alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar on Jul 12, 2026 at 15:34 UTC. URLQuery recorded 3 threat-system alerts on Jun 21, 2026 at 14:57 UTC. The evidence is not unanimous. AlienVault OTX listed 18 community pulse references (not vendor detections) on Jul 12, 2026 at 15:35 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Jul 12, 2026 at 15:34 UTC. URLScan completed without a malicious verdict (score 0) on Jun 23, 2026 at 08:15 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:13 UTC. Registration records for the domain list NETIM as the registrar and Oct 17, 2025 as the creation date. At collection time, the hostname resolved to 159.198.74.107 on AS22612 (NAMECHEAP-NET - Namecheap, Inc., US). The associated network metadata labels the endpoint as AS22612 Namecheap, Inc. in San Jose, US. The stored server header is Apache. Captured page title: “Benin Maritime Adminstration”. DOM analysis completed on Jun 21, 2026 at 18:20 UTC; stored DOM score 88/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 01:59 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Aug 25, 2026; checked Jun 21, 2026 at 16:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.