beacox[.]com

The domain beacox.com is currently active and resolves to Cloudflare name servers dax.ns.cloudflare.com and lana.ns.cloudflare.com. Registration records show the domain was created through Fewmoretaps OU operating as Trustname.com, indicating a commercial registrar rather than a privacy‑protected service. An HTTP request to the domain returns a 200 OK status, confirming the presence of a reachable web server.

VirusTotal analysis shows that 19 of 91 security vendors have flagged the domain as malicious, providing a clear consensus among scanning engines that the site is associated with phishing activity. The domain is listed on three public security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, further corroborating its malicious classification. The threat type is identified as generic phishing, but no specific brand or login portal has been disclosed in the available intelligence, leaving the exact lure employed by the site unknown.

Defenders should treat beacox.com as a high‑risk indicator: network perimeter devices, DNS resolvers, and endpoint protection platforms should continue to block the domain, and any existing connections to the host should be terminated. Continuous monitoring of the domain’s IP address, any future DNS changes, and additional threat‑intel feeds is recommended to detect potential repurposing or escalation. Because the site currently returns a valid HTTP response, threat hunters should consider active probing in a controlled environment to capture any payloads or redirects that may emerge, while ensuring that such activity does not expose internal assets to the phishing infrastructure.