beriex[.]com

Analysis indicates that the domain beriex.com was registered through NameSilo, LLC and created on March 03, 2026. The authoritative nameservers athena.ns.cloudflare.com and coby.ns.cloudflare.com resolve the domain to the IP address 104.21.61.210, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate was observed for the host, meaning HTTPS connections are not secured. The public page title returned when the site was reachable reads “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Beriex”, directly referencing cryptocurrency trading and matching the declared scam type of a crypto scam. The content explicitly impersonates the Ethereum brand, satisfying the listed brand‑target of Ethereum and confirming a brand‑impersonation motive.

VirusTotal analysis shows that two of ninety‑four scanning engines flagged the domain as malicious, providing independent vendor corroboration of suspicious activity. The domain is listed on a single security blocklist and has been added to the PhishDestroy blocklist, demonstrating that at least one external mitigation service has taken action against it. The current operational status is offline, which may be the result of takedown efforts or intentional shutdown by the operators.

Defenders should continue to monitor the IP address 104.21.61.210 for any reuse in other malicious campaigns, given the shared Cloudflare infrastructure. Network‑level blocks can be applied to the domain while it remains offline, and any future resolution to the same IP should be treated as high‑risk. Because the site lacked an SSL certificate, attempts to force HTTPS would fail, offering a possible detection vector. The absence of a valid TLS certificate means that the site could not have offered encrypted login forms, but the lack of HTTPS does not preclude other credential‑stealing techniques.