bay-investment-gmbh[.]com

Analysis of the domain bay-investment-gmbh.com shows it was registered on July 28 2026 through the registrar Fewmoretaps OU operating under the trade name Trustname.com. The domain resolves to the IP address 172.67.218.57, which is hosted by Cloudflare and uses the authoritative name servers joyce.ns.cloudflare.com and kurt.ns.cloudflare.com. The infrastructure is currently active and has been observed on a single security blocklist; the blocklist entry is identified as PhishDestroy. No additional public blocklist listings were found at the time of analysis.

VirusTotal records indicate that the domain was submitted to 91 antivirus and URL‑reputation engines, none of which returned a detection. This absence of alerts does not constitute evidence of benign behavior and should be treated as a neutral data point pending further investigation. No Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, or page‑title information were available in the supplied intelligence, limiting the ability to assess the site’s content or transport security.

Given the recent creation date, the use of a reputable CDN provider, and the presence on a phishing‑focused blocklist, the domain aligns with a generic phishing campaign. Defenders should add bay‑investment‑gmbh.com to internal URL filtering and proxy deny lists, monitor DNS queries for the associated Cloudflare name servers, and consider correlating outbound connections to 172.67.218.57 with user activity logs. Continuous re‑evaluation is advised, as additional detections or community reports may emerge.