businway[.]cyou

Analysis of businway.cyou indicates a high-risk phishing domain registered on July 24, 2026, through Dynadot Inc. The domain remains active as of August 6, 2026, resolving to IP address 64.89.161.173. Infrastructure review shows nameservers ns1.dyna-ns.net and ns2.dyna-ns.net, a configuration consistent with bulletproof or low-reputation hosting providers often exploited for phishing operations. Eleven of ninety-one security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, confirming detection by commercial threat intelligence feeds.

No specific brand target or phishing kit is identified in available data, though the domain name suggests an attempt to mimic business or enterprise login portals. The exact content and intended victim profile remain unconfirmed; no page title or HTTP response data is currently available for deeper classification.

Defenders should treat this domain as active and malicious, blocking resolution at DNS level and alerting users to avoid interaction. Further monitoring of 64.89.161.173 and associated domains under the same nameserver infrastructure is recommended to identify related campaigns.