bectelinvestment[.]com

This domain, bectelinvestment.com, is flagged as an elevated-risk brand impersonation phishing site. Analysis indicates it specifically targets users of the Across platform, a decentralized finance service, by mimicking legitimate investment or financial services. The threat type involves luring victims into disclosing sensitive credentials or transferring assets under false pretenses, a tactic commonly associated with cryptocurrency scams and fraudulent investment schemes.

Infrastructure analysis reveals the domain was registered on January 05, 2024, through Dynadot LLC, a registrar frequently utilized in phishing campaigns. It resolves to the IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the United States. Detection metrics show 13 out of 95 security vendors on VirusTotal have flagged the domain as malicious, while it appears on at least one security blocklist. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility. The page title, 'Bectelinvestment.com,' further confirms the impersonation attempt, as it lacks the branding sophistication typical of genuine financial platforms.

To mitigate risks associated with this brand impersonation threat, users are advised to verify the authenticity of any communication or website claiming affiliation with Across or similar services. Directly accessing the official platform via verified URLs or applications is recommended. Organizations should update their security blocklists to include this domain and its associated IP address (198.12.66.123). Additionally, monitoring for unusual transaction requests or credential prompts can help prevent unauthorized access. If interaction with the domain has already occurred, affected parties should revoke any compromised credentials, review account activity for anomalies, and report the incident to relevant financial or cybersecurity authorities.