bzayapp[.]berachains[.]tech

The domain bzayapp.berachains.tech is a phishing site engaged in brand impersonation targeting berachain, a known blockchain platform. This site posed an elevated risk by mimicking berachain's branding to deceive users into disclosing sensitive information or interacting with fraudulent services. No crypto drainer kit was detected, but the site operated as a credential phishing page. As of the latest verification, bzayapp.berachains.tech has been taken offline.

Technical analysis shows that bzayapp.berachains.tech was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Dynadot LLC on February 07, 2025, and resolved to the IP address 75.2.115.196, hosted on Amazon.com, Inc.'s infrastructure in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'berachains.tech'. The site used Apache HTTP Server technology and had nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. Google Safe Browsing did not flag the domain, and Gridinsoft assigned it a trust score of 0/100.

Users who interacted with bzayapp.berachains.tech should immediately change any credentials entered on the site and enable two-factor authentication (2FA) on their accounts. Monitor financial and blockchain activity for unauthorized transactions, and consider reporting the incident to the impersonated brand (berachain) and relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units. If wallet interactions occurred, revoke any suspicious token approvals and transfer funds to a new, secure wallet.