maxludumes[.]com

Analysis of the domain maxludumes.com indicates it is an active phishing infrastructure registered on July 20, 2026, through Realtime Register B.V. The domain currently resolves to the IP address 85.239.144.149 and utilizes Cloudflare nameservers (carl.ns.cloudflare.com and dahlia.ns.cloudflare.com). As of the latest assessment, the domain appears on one security blocklist and is actively blocked by PhishDestroy, suggesting its involvement in malicious activity. No specific brand impersonation or scam category has been confirmed in available data, and the exact content of the site remains unanalyzed. VirusTotal scans conducted by 95 vendors returned no detections; however, the absence of flags does not confirm the domain's safety. The domain's recent registration and immediate appearance on blocklists raise concerns about its intent. Infrastructure analysis reveals reliance on Cloudflare for DNS resolution, a common tactic to obscure hosting details and evade takedowns. The IP address 85.239.144.149 has not been linked to additional malicious domains in the provided intelligence, but further investigation into its hosting provider and associated infrastructure is warranted. Defenders are advised to monitor network traffic for connections to maxludumes.com and its resolving IP, particularly in environments where phishing threats are a known risk. Given its active status and blocklist inclusion, organizations should consider preemptive blocking at the DNS or proxy level. Additional analysis, including SSL certificate inspection and HTTP response headers, may provide further context on the domain's purpose. No evidence currently links this domain to a specific phishing kit or targeted brand, and its classification remains under investigation.