app[.]beawex[.]com

app.beawex.com was first observed on May 04, 2026 when the registration record was created by Fewmoretaps OU d/b/a Trustname.com. The domain resolves to the IPv4 address 64.7.198.11 and is served through Cloudflare nameservers violet.ns.cloudflare.com and wesley.ns.cloudflare.com. Internal analysis classifies the site as a generic phishing resource, and the risk level remains under investigation. As of the report date (August 06, 2026) the domain is still active and appears on a single security blocklist. The blocklist entry is also reflected in the PhishDestroy mitigation service, which has already blocked the domain for end‑user protection.

VirusTotal has processed the domain with 91 scanning engines; none of the engines currently raise a detection. This absence of detections should not be interpreted as an indication of benign behavior, as the scanning outcome may be incomplete or delayed. No additional public threat‑intel sources (such as OTX or Google Safe Browsing) are referenced in the current dataset, and no SSL certificate details, HTTP response codes, or page‑title information have been disclosed. Consequently, the precise content hosted at the URL remains unknown, and the specific phishing lure (e.g., credential‑stealing form, credential‑validation page) cannot be confirmed.

Defenders should continue to enforce existing phishing‑filtering controls and consider adding app.beawex.com to local blocklists or proxy deny lists. Network monitoring should flag any outbound connections to 64.7.198.11, and DNS logging should capture resolution attempts for the domain. Given the recent creation date and the active blocklist status, additional passive DNS and sinkhole observations are recommended to track potential infrastructure changes. Until further forensic analysis of the web content is performed, the domain should be treated as a high‑confidence phishing indicator.