23starmaxglobal[.]com

This domain, 23starmaxglobal.com, is flagged as a high-risk generic phishing site targeting users with fraudulent investment schemes. The page title "23 Star Max Global" suggests an attempt to mimic legitimate financial or trading platforms, though no direct brand impersonation is confirmed. No specific crypto drainer kit signatures or credential-harvesting frameworks have been identified in initial analysis, but the domain exhibits characteristics consistent with fake investment or advance-fee fraud operations. Users are likely lured through social engineering tactics, such as promises of high returns or exclusive financial opportunities, to disclose personal or financial information. Infrastructure analysis reveals the following technical indicators: the domain was registered on July 03, 2025, through NAMECHEAP INC and resolves to the IP address 103.180.120.198, hosted by QTIME BUSINESSES PRIVATE LIMITED (AS141004) in India. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious, indicating limited but present detection. The domain appears on one security blocklist and is actively blocked by PhishDestroy. No Google Safe Browsing (GSB) detections are currently recorded, though this may reflect a lag in reporting rather than a clean status. As of the latest assessment, 23starmaxglobal.com remains active, with no evidence of takedown or suspension. The combination of recent registration, low detection rates, and active hosting suggests the campaign is in an early or evasive phase. Users are advised to avoid interacting with the domain, and organizations should consider implementing DNS-based blocking for 103.180.120.198 or the domain itself. Given the high-risk classification, further monitoring is recommended to track potential shifts in infrastructure or additional blocklist inclusions. The seed reference for this investigation is 11d9ec.