presale[.]beckrecoin[.]com

The domain presale.beckrecoin.com was observed hosting a page titled “$BCKR PRE‑SALE”. The site resolved to the IP address 104.17.96.13, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Registration data show the domain was created on 21 February 2026. The TLS certificate is rated E1, indicating a low‑trust rating.

VirusTotal reports that 10 of 93 scanning engines flagged the domain as malicious, and the domain is listed on at least one public phishing blocklist. PhishDestroy has actively blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100. The page title suggests an attempt to promote a pre‑sale offering for a cryptocurrency token identified as “BCKR”. No additional content has been captured, and the site is currently offline, limiting further forensic analysis.

The combination of a recent registration, low‑trust SSL grade, multiple vendor detections, and blocklist listings indicates a high probability that the domain was used for a phishing or fraud campaign targeting investors in the BCKR token. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists, and monitor for any related infrastructure such as additional subdomains or IP addresses within the same Cloudflare range. Incident response teams should also correlate any user reports of unsolicited messages referencing a “BCKR pre‑sale” with this indicator to identify potential victims. Ongoing vigilance is recommended because the short lifespan of the site suggests a “hit‑and‑run” operation that may reappear under new domains.