berachain[.]fun

berachain.fun entered the PhishDestroy evidence set on Oct 22, 2025. The hostname explicitly references Berachain; stored content metadata identifies the same apparent target. Content analysis also recorded brand signals for Foundation. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).

Three independent sources are positive: VirusTotal, URLQuery, and URLScan. VirusTotal recorded 3 detections among 95 engines: ADMINUSLabs, alphaMountain.ai, Fortinet on Feb 23, 2026 at 06:06 UTC. URLQuery recorded 100 detections. URLScan returned a malicious verdict with score 100 on Mar 4, 2026 at 01:11 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:10 UTC; content was unavailable. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Apr 30, 2025 as the creation date. At collection time, the hostname resolved to 69.5.189.56 on AS42624 (swissnetwork02 Global-Data System IT Corporation, SC). The associated network metadata labels the endpoint as AS42624 Global-Data System IT Corporation in Zürich, CH. The stored server header is openresty-cast. Captured page title: “BERACHAIN | Play at the best online casino based on Blockchain”. DOM analysis completed on Apr 23, 2026 at 15:22 UTC; stored DOM score 10/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:32 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

Taken together, the page content and independent findings support classifying this hostname as Berachain-themed crypto scam.