play[.]beawex[.]com

Analysis of play.beawex.com shows a newly registered domain created on May 04, 2026 that is currently active and resolves to the IPv4 address 64.7.198.11. The domain is listed under the registrar Fewmoretaps OU operating as Trustname.com and is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers violet.ns.cloudflare.com and wesley.ns.cloudflare.com. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, suggesting that at least one security organization has identified it as malicious.

VirusTotal scans have been submitted to 91 antivirus and URL‑reputation vendors, none of which have issued a detection at the time of observation; however, the absence of a detection does not constitute a safety guarantee. No public Safe Browsing, Open Threat Exchange, or additional blocklist records are disclosed in the available intelligence. Content analysis of the site, including page titles or brand targeting, has not been published, leaving the precise phishing scenario undefined.

Defenders should treat the domain as suspicious, enforce DNS filtering to block resolution to 64.7.198.11, monitor outbound traffic for connections to the Cloudflare name servers, and consider adding the domain to internal blocklists. Continuous re‑scanning with updated threat‑intel feeds is recommended to capture any subsequent changes in detection status or observed payloads.