bft[.]dvj[.]mybluehost[.]me

The domain bft.dvj.mybluehost.me presents a page titled "Welcome — kommt bald," a German phrase translating to "coming soon," suggesting the site is under construction or placeholder content. This setup is commonly used for phishing or malware distribution campaigns, where a generic landing page masks malicious activity. The threat posed includes potential credential theft, malware delivery, or serving as a command-and-control endpoint, given the site's poor reputation.

Technical evidence shows VirusTotal flagged this domain with 11 out of 95 security vendors detecting malicious activity, including alphaMountain.ai, CRDF, CyRadar, ESET, and Emsisoft. The domain is registered via Domain.com, created on 2016-10-05, and hosted on IP address 185.195.12.158 in Great Britain, assigned to AS31898 Oracle Corporation. SSL is issued by Let's Encrypt (R13), and nameservers are ns1.mybluehost.me and ns2.mybluehost.me. GridinSoft trust rating is 0 out of 100, indicating high risk.

Currently, the site is offline or down, but its historical malicious detections and blocklist presence (1 blocklist) suggest it remains a threat if reactivated. Risk level is high, as the combination of generic content, low trust score, and multiple vendor flags indicates a compromised or intentionally malicious setup. Immediate caution is advised against visiting or interacting with this domain.