beast-auth[.]com

The domain beast-auth.com was registered on May 8 2026 through Web Commerce Communications Limited dba WebNic.cc. It is actively serving a web page whose title reads “MrBeast | 1000 Creators”, a clear attempt to mimic the well‑known MrBeast brand and lure victims with a purported giveaway. Infrastructure analysis shows the zone is delegated to the authoritative nameservers cody.ns.cloudflare.com and raegan.ns.cloudflare.com. DNS resolution returns the address 172.67.184.14, an IP hosted by a content‑delivery network located in Canada. The site presents a TLS certificate issued by a free certificate authority and returns HTTP 526, indicating an SSL handshake issue with the origin server. Multiple threat indicators corroborate malicious intent. The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing flags it for SOCIAL_ENGINEERING, and VirusTotal records seven out of ninety‑five scanners marking the domain as malicious. AlienVault OTX references the domain in one pulse, and the Gridinsoft trust score is 0 / 100. The combination of brand impersonation and a fake‑giveaway narrative aligns with the reported scam type. Given the high‑risk rating and active status, defenders should treat beast‑auth.com as a confirmed fake‑giveaway impersonation targeting followers of MrBeast. Recommended controls include adding the domain to blocklists, enforcing URL filtering, monitoring TLS certificate changes, and educating end‑users about unsolicited giveaway links that reference the MrBeast brand.