beam-get[.]com

This domain, beam-get.com, is identified as a brand_impersonation threat targeting the Across platform. Analysis indicates the site was designed to mimic legitimate Across services, likely to deceive users into divulging credentials or sensitive information. No specific drainer kit signatures have been confirmed, but the domain exhibits characteristics consistent with credential harvesting or fraudulent transaction schemes. Infrastructure analysis reveals the domain was registered on September 06, 2025, through NiceNIC International Group Co., Limited. It resolved to the IP address 172.67.165.209, a host with no prior association to legitimate Across infrastructure. At the time of detection, the domain was flagged by 3 out of 95 security vendors on VirusTotal, and it appeared on 2 independent security blocklists. The Gridinsoft trust score for this domain was recorded at 0/100, indicating a complete lack of reputable standing. No entries were found in Google Safe Browsing (GSB) at the time of assessment, suggesting the domain may have evaded initial large-scale detection. The domain is currently offline, having been taken down following its identification as malicious. It was blocked by multiple security engines, including PhishDestroy and Enkrypt, prior to deactivation. Despite its offline status, residual risk remains for users who may have interacted with the domain during its active period. Organizations are advised to monitor for unauthorized access attempts or anomalous transactions linked to this domain. Network-level blocking of the IP address 172.67.165.209 and the domain beam-get.com is recommended as a precautionary measure. Users should be alerted to verify the authenticity of communications purporting to originate from Across, particularly those directing to unfamiliar domains.