baevux[.]com

The domain baevux.com was registered on July 31, 2026 and is currently active. DNS resolution points to the IP address 64.7.198.11, and the authoritative name servers are listed as donald.ns.cloudflare.com and eva.ns.cloudflare.com, indicating the use of Cloudflare's DNS infrastructure. Registration was performed through Fewmoretaps OU d/b/a Trustname.com, a registrar that has been observed in other malicious registrations.

Threat intelligence feeds have listed baevux.com on three security blocklists, and the domain is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show that 11 of 91 security vendors flag the domain, suggesting a measurable level of malicious suspicion. No publicly available page title, brand target, or phishing kit information has been disclosed, leaving the exact spoofed brand or credential collection method unconfirmed.

Infrastructure analysis therefore relies on observable DNS and hosting data, as well as the presence on multiple blocklists and vendor detections. Defenders should continue to block baevux.com at network perimeter and endpoint layers, monitor outbound traffic for connections to 64.7.198.11, and update URL filtering policies to include the identified nameservers. Ongoing observation is recommended to capture any later disclosure of the hosted content or associated phishing campaigns, which would enable more precise attribution and response actions.