# PhishDestroy domain threat record: getbze.live Content language: English Canonical HTML report: https://phishdestroy.io/domain/getbze.live/ Machine-readable companion: https://phishdestroy.io/domain/getbze.live/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-20 13:02:34 UTC - Last availability or vendor check: 2026-10-22 10:58:26 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: binance ## Stored infrastructure - Observed IP address: 104.21.24.25 - Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED - Last stored HTTP status: 200 - Registration date (registry RDAP, getbze.live): 2026-10-17 19:13:39 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1596c-4cc1-74db-b58a-bcd76c3fa6af/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/getbze.live - Certificate Transparency search: https://crt.sh/?q=%25.getbze.live - Web Archive lookup: https://web.archive.org/web/*/https://getbze.live/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy has classified getbze.live as a suspicious domain based on external detections. The domain was first observed by PhishDestroy on 2026-10-20. No page title was recorded at the time of observation. How the scam works The presence of security‑vendor detections indicates the domain could be leveraged in typical phishing, fraud or malware distribution campaigns, but no specific malicious behavior was observed on this site. Without a concrete scheme classification, the exact mechanism remains uncertain. Evidence VirusTotal reported three detections from 92 scanning engines on 2026-10-20, with Forcepoint ThreatSeeker, Kaspersky and Netcraft flagging the domain. Google Safe Browsing checked the same day and did not flag the site. External blocklists MetaMask and SEAL listed the domain, and PhishDestroy’s internal blocklist also includes it; all checks were performed on 2026-10-20. OTX showed zero pulses as of that date. Infrastructure The domain was registered on 2026-10-17 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Network records show the domain resolving to the IP address 104.21.24.25 at the time of the check. What to do If you visited the site, avoid entering any credentials, wallet information or personal data; if you did, treat those details as potentially compromised and change passwords or revoke any granted permissions. Defenders should add getbze.live to block or monitoring lists and review logs for any connections to the recorded IP after 2026-10-20. No wallet‑specific remediation is recommended because wallet recommendations are not enabled for this assessment. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a152fe-9931-72ca-8c63-a5005e8dff63/ VirusTotal report: https://www.virustotal.com/gui/domain/getbze.live Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=getbze.live Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-20 13:07:00 UTC ## Stored page captures - Primary capture: https://i.ibb.co/cXLK1bmT/f837c1da3693.png Captured: 2026-10-20 13:08:57 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1596c-4cc1-74db-b58a-bcd76c3fa6af.png Captured: 2026-10-20 13:08:57 UTC Source report: https://urlscan.io/result/01a1596c-4cc1-74db-b58a-bcd76c3fa6af/ - URLScan capture 2: https://urlscan.io/screenshots/01a152fe-9931-72ca-8c63-a5005e8dff63.png Captured: 2026-10-20 13:02:34 UTC Source report: https://urlscan.io/result/01a1596c-4cc1-74db-b58a-bcd76c3fa6af/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c49c234e-c5ce-4ee8-9df4-8373603fb0bb.png Captured: 2026-10-20 13:05:06 UTC Source report: https://radar.cloudflare.com/scan/c49c234e-c5ce-4ee8-9df4-8373603fb0bb SHA-256: 8dafc4857c41f96a2d29d6c98eeff0f284c2c03d07e32ee8697eae5d002c8e26 - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a152fe-9931-72ca-8c63-a5005e8dff63.png Captured: 2026-10-19 07:09:49 UTC Source report: https://urlscan.io/result/01a152fe-9931-72ca-8c63-a5005e8dff63/ SHA-256: 12b924dce7791ff9e753867f1c6fed34a5b38188f3851fec690bd72437ecdee4 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a1596d-294c-776c-a064-d314f8e97989.png Captured: 2026-10-20 13:08:41 UTC Source report: https://urlscan.io/result/01a1596d-294c-776c-a064-d314f8e97989/ SHA-256: 12b924dce7791ff9e753867f1c6fed34a5b38188f3851fec690bd72437ecdee4 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T16:42:59Z", "uuid": "01a1596c-4cc1-74db-b58a-bcd76c3fa6af", "scanned_at": "2026-10-20T13:07:44Z", "final_url": "https://getbze.live/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://getbze.live/", "from": "http://getbze.live/", "status": 307 } ], "ip": "172.67.216.123", "domains": [ "fonts.googleapis.com", "api.ipify.org", "db.onlinewebfonts.com", "cdnjs.cloudflare.com", "bsc-dataseed.binance.org", "fonts.cdnfonts.com", "cdn.jsdelivr.net", "crossmark.io", "play-lh.googleusercontent.com", "pbs.twimg.com", "static.cloudflareinsights.com", "tronscan-apis.com", "xrpl-api.com", "trontokenapi.com" ], "ips": [ "104.21.2.109", "104.21.72.124", "172.253.115.95", "104.17.207.5", "104.17.25.14", "76.76.21.21", "172.253.62.119", "146.75.36.159", "52.4.113.16", "104.26.12.205", "104.16.79.73", "172.67.216.123" ], "asns": [ "13335", "15169", "16509", "54113", "14618" ], "countries": [ "US" ], "link_domains": [ "factory.getbze.com", "dex.getbze.com", "cointrunk.io", "burner.getbze.com", "docs.cointrunk.io", "www.ibcprotocol.dev", "staking.getbze.com", "communities.getbze.com", "app.getbze.com", "go.skip.build", "app.osmosis.zone", "nonkyc.io", "www.coingecko.com", "www.livecoinwatch.com", "www.dextools.io", "coincodex.com", "medium.com", "x.com", "discord.gg", "t.me", "github.com", "ping.pub", "explorer.getbze.com", "explorer.chaintools.tech", "explorer.whenmoonwhenlambo.money", "atomscan.com", "www.keplr.app", "vidulum.app", "chaintools.tech" ], "social": [ "https://medium.com/bzedge-community", "https://x.com/BZEdgeCoin", "https://discord.gg/wb68JV3QhZ", "https://t.me/BZEdgeOfficial", "https://github.com/bze-alphateam", "https://medium.com/bzedge-community/bze-burning-raffles-a02d4b40e4eb", "https://medium.com/bzedge-community/bze-status-update-oct-8-2026-39e51d830cdd", "https://medium.com/bzedge-community/bze-code-audited-by-oak-security-51f1c093477e", "https://medium.com/bzedge-community/bze-status-update-may-2-2026-0f519a6f6178", "https://github.com/bze-alphateam/Official-BZEdge-Graphics" ], "doc_hash": "544d788977098b6392e81bcc786df6740b2169b1629306ef0747324468230fc6", "script_hashes": [ "c900dc386ca43fceea4c5405d740da248fbee7a1991b7b25648af0b8885d9f10", "600b97b3a7140c9dc99432432546046f4bfc2520c870d0cff8e8e36763ef5172", "e235880c3212fd2cbc620064832188e7cbb111c32d661dc72389eb22966ad148", "f4cb549869ad1779eea40ba9f14c478dd7d45ad293cfc5955473b19af142ce0c", "7faab4265f23b263a410b31ba152be63d47aa03b5fa601f1c313651b49f71aab" ], "globals": [ "_0x1070", "_0x49a011", "_0x5ba2", "__ledgerLogsListen", "XRPLWalletConnect", "openWalletModal", "closeWalletModal", "TRACK_ID", "Buffer", "requestBackendQRCode", "cancelBackendPairing", "checkBackendSession", "connectWithBackendModal", "cancelBackendModal", "SERVER_DOMAIN", "getSignClientFromAdapter", "sendDataToServer", "isBackendWcEnabled", "saveWcSessionToBackend", "signAndBroadcastWithBackend", "connectWebSocket", "directConnectWallet", "onBackendWalletConnected", "updateTransactionStatus", "updateBatchProgress", "showCompletionModal", "__wcDeeplinkHackApplied", "__cfBeacon", "__enc", "__encInitPromise", "__p_XQFq_cache", "__p_PH3z_array", "__globalObject", "__TextDecoder", "__Uint8Array", "__Buffer", "__String", "__Array", "utf8ArrayToStr", "__p_eicl_MAIN_STR_decode" ], "cookies": [ "gacfxdn1x7" ], "storage_keys": [ "beezee-theme" ], "tls": { "san": [ "*.getbze.live", "getbze.live" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "getbze.live", "protocol": "QUIC", "valid_to": "2027-01-15T18:33:13Z", "valid_from": "2026-10-17T18:33:14Z" }, "domain_age_days": 2, "apex_age_days": 2, "tls_age_days": 2, "tls_valid_days": 89, "requests": 154, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericcrypto" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Crypto" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors http: https:", "x-content-type-options": "nosniff" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T17:55:05Z", "uuid": "c49c234e-c5ce-4ee8-9df4-8373603fb0bb", "scanned_at": "2026-10-20T13:05:06Z", "final_url": "https://getbze.live/", "status": 200, "history": [ { "url": "https://getbze.live/", "status": 200 } ], "dom_hash": "2f77316def0df3e9fc5ea0994b007e2c5e5057a804407b79cf68d1acd7acf3e3", "doc_hash": "544d788977098b6392e81bcc786df6740b2169b1629306ef0747324468230fc6", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains", "Scam", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "getbze.live", "type": "A", "value": "172.67.216.123" }, { "name": "getbze.live", "type": "A", "value": "104.21.24.25" }, { "name": "getbze.live", "type": "AAAA", "value": "2606:4700:3034::ac43:d87b" }, { "name": "getbze.live", "type": "AAAA", "value": "2606:4700:3036::6815:1819" } ], "dnssec_valid": false, "ip": "172.67.216.123", "whois": { "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "created": "2026-10-17T19:13:39Z", "updated": "2026-10-17T19:14:07Z", "expires": "2027-10-17T19:13:39Z", "nameservers": [ "ines.ns.cloudflare.com", "chase.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-20T18:05:18Z", "analysis_at": "2026-10-20T12:59:34Z", "stats": { "timeout": 0, "harmless": 50, "malicious": 7, "suspicious": 1, "undetected": 34 }, "detections": { "CRDF": "malicious", "G-Data": "phishing", "Netcraft": "malicious", "SOCRadar": "suspicious", "Kaspersky": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "first_seen": "2026-10-17T19:36:55Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ines.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "chase.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::6815:1819" }, { "ttl": 21600, "type": "NS", "value": "chase.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.216.123" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:d87b" }, { "ttl": 300, "type": "A", "value": "104.21.24.25" } ], "dns_at": "2026-10-20T13:04:57Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.getbze.live", "getbze.live" ], "issuer": "Let's Encrypt / YE2", "serial": "6b0a2e4ce044516d4b76eaac965673a40a1", "sha256": "29bab10ffc8c916e0586c038963ded8c8453456111333aeee18b1a900ac3a23a", "subject": "getbze.live", "valid_to": "2027-01-15T18:33:13Z", "valid_from": "2026-10-17T18:33:14Z" }, "rdap": { "status": [ "client delete prohibited", "client transfer prohibited" ], "events": { "expiration": "2027-10-17T16:00:00Z", "registration": "2026-10-17T16:00:00Z", "registrar expiration": "2027-10-17T16:00:00Z", "last update of RDAP database": "2026-10-17T16:00:00Z" }, "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED", "registrar_iana_id": "3765" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T08:11:31Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "getbze.live" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-20T13:05:23Z", "first": "2026-10-20T13:05:23Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 31467 }, "social_tags": { "ogUrl": "https://getbze.com", "title": "BZE Coin | BeeZee Blockchain - Simplified DeFi Platform", "author": "BeeZee Network", "ogType": "website", "robots": "index, follow", "ogImage": "https://getbze.com/network.png", "ogTitle": "BZE Coin | BeeZee Blockchain - Simplified DeFi Platform", "keywords": "BZE Coin, BeeZee Network, DeFi blockchain, decentralized finance, token creation, token factory, DEX, decentralized exchange, order book DEX, Cosmos blockchain, IBC protocol, crypto staking, blockchain rewards, create crypto token, low cost blockchain, fast blockchain, DeFi platform, mobile crypto w", "ogSiteName": "BeeZee Network", "themeColor": "#0b1220", "description": "BeeZee Network is a fast, cost-efficient DeFi blockchain platform powered by $BZE Coin. Create tokens in seconds, trade on our DEX, stake for rewards, and access decentralized services through our Cosmos SDK-based blockchain with IBC support.", "twitterCard": "summary_large_image", "canonicalUrl": "https://getbze.com/", "ogDescription": "BeeZee Network is a fast, cost-efficient DeFi blockchain platform powered by $BZE Coin. Create tokens in seconds, trade on our DEX, stake for rewards, and access decentralized services through our Cosmos SDK-based blockchain with IBC support." }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 7, "tls": 30, "wait": 117, "connect": 6, "download": 46 }, "response_ms": 206 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 185559, "co2_grams": 0.0068, "cleaner_than": 9 }, "dns_server": { "ns": [ { "ip": "173.245.58.164", "host": "ines.ns.cloudflare.com" }, { "ip": "108.162.195.156", "host": "chase.ns.cloudflare.com" } ], "zone": "getbze.live" }, "location": { "ip": "2606:4700:3036::6815:1819", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "getbze.live" }, "dns": { "A": [ "104.21.24.25", "172.67.216.123" ], "NS": [ "ines.ns.cloudflare.com", "chase.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"chase.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417766991, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3036::6815:1819", "2606:4700:3034::ac43:d87b" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000; includeSubDomains; preload", "message": "Site is compatible with the HSTS preload list!", "compatible": true }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-ancestors http: https:", "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3034::ac43:d87b", "family": 6 }, "redirects": { "chain": [ "https://getbze.live" ] }, "tech_stack": { "technologies": [ "Chakra UI", "React", "Emotion", "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://dex.getbze.com/staking", "https://cointrunk.io/", "https://dex.getbze.com/", "https://factory.getbze.com/", "https://burner.getbze.com/", "https://staking.getbze.com/", "https://vidulum.app/", "https://dex.getbze.com/exchange", "https://docs.cointrunk.io/", "https://www.ibcprotocol.dev/", "https://communities.getbze.com/", "https://app.getbze.com/", "https://go.skip.build/", "https://app.osmosis.zone/pool/856", "https://nonkyc.io/market/BZE_USDT", "https://www.coingecko.com/en/coins/beezee", "https://www.livecoinwatch.com/price/BZEdge-BZE", "https://www.dextools.io/app/en/osmosis/pair-explorer/856", "https://coincodex.com/crypto/bzedge/", "https://medium.com/bzedge-community", "https://x.com/BZEdgeCoin", "https://discord.gg/wb68JV3QhZ", "https://t.me/BZEdgeOfficial", "https://github.com/bze-alphateam", "https://ping.pub/beezee" ], "external_count": 36, "internal_count": 1 }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "frame-ancestors http: https:", "x-content-type-options": "nosniff" } } } } ```