bcon-asset[.]com

This domain, bcon-asset.com, is actively engaged in credential theft phishing operations targeting users of Beacon Asset. Analysis indicates the site is designed to harvest login credentials, financial details, or other sensitive information under the guise of a legitimate Beacon Asset platform. The domain remains operational as of the latest verification, posing an ongoing risk to unsuspecting visitors. Infrastructure analysis reveals the domain was registered on June 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.45.172, which has been linked to other phishing campaigns. The domain is flagged by 4 of 95 security vendors on VirusTotal, appears on one security blocklist (PhishDestroy), and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy to fraudulent sites. The page title, "Beacon Asset," further confirms the impersonation attempt. Current status confirms the domain remains active, with no takedown or mitigation measures observed. Users are strongly advised to avoid interacting with this domain or entering any credentials. Organizations should block the domain and its associated IP (104.21.45.172) at the network level. If credentials were already entered, immediate password resets and multi-factor authentication (MFA) activation are recommended for all potentially compromised accounts. Security teams should monitor for further indicators of compromise linked to this infrastructure.