beyondfxinvestment[.]com

Analysis of beyondfxinvestment.com, created on 26 December 2023, indicates an active generic phishing infrastructure. The domain resolves to the IPv4 address 139.99.89.100 and is hosted under the name servers dns1.thekinsmenservers.com and dns2.thekinsmenservers.com, both registered via OwnRegistrar, Inc. The domain has been listed by PhishDestroy and appears on a single external blocklist, confirming that at least one security feed has flagged it. VirusTotal records show the domain was examined by 91 scanning engines, none of which reported a detection at the time of analysis; however, the absence of detections does not constitute a safety guarantee.

No public SSL certificate information, HTTP response codes, or page title data are presently available, limiting visibility into the server’s configuration and content. The lack of Safe Browsing or Open Threat Exchange entries further suggests that the domain has not yet been incorporated into those specific intelligence sources.

Defenders should block traffic to the domain and its resolving IP, monitor for any newly observed associations in threat‑intel feeds, and consider adding the domain to internal blocklists. Ongoing observation is recommended to detect potential changes in hosting, infrastructure, or detection status, as the current evidence points to a deliberately crafted phishing operation that remains under investigation.