be95[.]me

PhishDestroy first observed be95.me on Jun 28, 2026. Stored content metadata identifies Bet365 as the apparent target. The captured page title is “bet365”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 100/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 20 detections among 91 engines: Criminal IP, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, MalwareURL, SOCRadar, Sophos, VIPRE, Webroot on Jul 31, 2026 at 02:07 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Jun 28, 2026 at 10:00 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:31 UTC.

HTTP 200 was recorded on Aug 8, 2026 at 10:09 UTC. Registration records for the domain list DYNADOT LLC as the registrar and Jun 6, 2026 as the creation date. Registration preceded first observation by 21 days. At collection time, the hostname resolved to 153.43.177.197 on AS54994 (ML-1432-54994 - Meteverse Limited., CA). The recorded endpoint location is Tung Chung, HK. The stored server header is nginx. DOM analysis on Jul 1, 2026 at 18:20 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Sep 6, 2026; checked Jun 28, 2026 at 10:00 UTC.

Stored content provides classification context, but only one source contains a positive finding.