app[.]yieldbay[.]life

Analysis of app.yieldbay.life indicates an active generic phishing infrastructure hosting an investment‑scam campaign. The domain was registered on 23 March 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare edge address 188.114.97.3, which is associated with Cloudflare, Inc. in Canada. The site is fronted by Cloudflare services, including Browser Insights and HTTP/3, and presents a TLS certificate from Let’s Encrypt (E8). An HTTP 403 response is returned for the root path, and the page title is reported as “Just a moment…”, suggesting a possible challenge page. VirusTotal records show 4 of 94 security‑engine scans flagging the domain, while Gridinsoft assigns a trust score of 0 / 100 and the domain appears on a single blocklist, currently listed by PhishDestroy. The limited detection surface and the recent creation date leave the full phishing payload undisclosed; no specific landing page or credential‑collection form has been observed. Defenders should block the domain at network borders, add the IP 188.114.97.3 to deny lists, and monitor for related Cloudflare‑hosted subdomains. Continued surveillance of the registrar and name‑server records is advised, as the infrastructure could be repurposed for additional campaigns.