Ir al informe de seguridad
Checked 09/08/2026 Ref 57514D5F

MALICIOUS — CRITICAL

maxbim[.]icu

PhishDestroy has identified maxbim.icu as an active phishing domain engineered to mimic a legitimate brand and harvest user credentials.

100/100 evidence score · Critical
VirusTotal
12/91
Blocklists
No stored match
Disponibilidad
Último activo conocido · HTTP 200
Report / Add Evidence Appeal this listing
2026-05-16 09:40 UTCÚltimo activo conocido · HTTP 200
View full size Wayback Descargar

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Este dominio ha sido señalado como malicioso
Motores de seguridad que informan una detección: 12. Tenga extrema precaución: no ingrese credenciales o información personal.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@whiteprivacy.com. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
2 months
Reports sent
1
Latest case ID
PD-20260516-6BFECB
Current status
HTTP 200 at latest stored check
Jump to section
Resumen del informe

maxbim.icu — Último activo conocido (HTTP 200). Tipo de estafa: Generic Phishing. Resumen de las pruebas: VirusTotal 12/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLQuery 1 det.; PhishDestroy score 100/100. Registrador: Global Domain Group.

El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.

Evidence Analysis

Stored AI analysis · 16/05/2026

Ref 57514D5F

Is maxbim.icu a Malicious Phishing Site? Security Alert

PhishDestroy identifies maxbim.icu as an active phishing domain posing as a generic brand lure. This domain, created March 17 2026, is flagged by 3 of 95.

PhishDestroy has identified maxbim.icu as an active phishing domain engineered to mimic a legitimate brand and harvest user credentials. The site leverages a recently issued Let’s Encrypt certificate to appear trustworthy while resolving to IP 163.61.188.2, a hosting provider known for accommodating fraudulent infrastructure. Users who encounter this domain should treat any login prompts as highly suspect and refrain from entering personal or financial information. This domain was registered through Global Domain Group LLC on March 17 2026, indicating a very recent campaign designed to fly under detection thresholds. VirusTotal analysis shows the domain is flagged by 3 of 95 participating security vendors, placing it in the elevated-risk category. Although the SSL certificate is valid, the combination of fresh registration, low detection rate, and suspicious hosting context heightens the likelihood of credential theft or malware delivery. If you have already visited maxbim.icu, assume your credentials may have been compromised and immediately change passwords used on that site. Scan local devices with updated antivirus software and review financial accounts for unauthorized transactions. Report the domain to your organization’s security team or to PhishDestroy’s threat-intel platform to aid in broader takedown efforts.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
12 det.
URLQuery
URLQuery
1 det.
URLScan
URLScan
Denunciar ↗
Gridinsoft
1/100
ScamAdviser
Scamadviser
0/100
Certificado TLS
Let's Encrypt 29d
Edad
5 mo
Estado observado
Último activo conocido 200
PhishDestroy
DestroyList
En lista
Reports Sent
1
Cobertura de los datos14 recorded checks
VirusTotal 12 / 91 URLQuery 1 det. PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture informe almacenado URLScan verdict Análisis finalizado Bloqueos de DNS 14 comprobado — sin bloqueos TLS valid certificate, 29d WHOIS 5 mo old Captura de pantalla 3 captures · 3 sources Cadena de redireccionamientos no sondeado Gridinsoft 1/100 Scamadviser 0/100

Proceso de respuesta ante amenazas Pipeline

Descubrimiento
Checks
Reports
Disponibilidad
11/12
Sent Report Recorded
Stored sent-report record for registrar Global Domain Group LLC, hosting provider, 2 abuse contacts
abuse@whiteprivacy.comabuse@globaldomaingroup.com
16/05/2026

Estado de la lista de bloqueados pública

Captura guardada

Primary capture 1 / 3
Ver a tamaño completo Wayback Descargar
Título de la página
Home - MaxBim
Certificado TLS
Valid transport encryption · Emitido por Let's Encrypt · valid for 29 days

Inteligencia de dominios

Dominio
URLScan Verdict Análisis finalizado score 0 report ↗
Servidor / ASN LiteSpeed · AS153568 NEW DHAKA HARDWARE
Reputación de IP abuse score 26/100 14 reports checked 13/07/2026
Registrador Global Domain Group US(US)
Contacto de abusoabuse@whiteprivacy.com, abuse@globaldomaingroup.com
Registro de la ICANNRegistradores oficiales acreditados por la ICANN →
Búsqueda en WHOISRDAP de ICANN para maxbim.icu →
Dirección IP 163.61.188.2 US
UbicaciónUS Staten Island, US
RedAS153568 · MIT
IP inversaviewdns.info → rapiddns.io →
RegistroCreado 17/03/2026 (145d)
Elapsed Since First Report 65 days
Qué contabilizamos Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Último activo conocido.
Qué contiene cada informe Los registros de informes salientes almacenados pueden hacer referencia a evidencia disponible en ese momento, como veredictos de proveedores, datos de registro, detalles de alojamiento, clasificaciones o capturas de pantalla. Esta página no infiere la carga útil entregada, el recibo, el acuse de recibo o la acción exacta por parte de un destinatario.
Estado HTTP200
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Primera detección16/05/2026
IoC Extractionscanned 29/07/20260 wallet · 0 Telegram IoCs
Submitted URLhttps://maxbim.icu/
Servidores de nombresdns1.lytehosting.comdns2.lytehosting.comdns3.lytehosting.comdns4.lytehosting.com
TLS Fingerprint
TLS Observationvalid from 17/03/2026scanned 16/05/2026
Favicon Hash
Case ID
ZONA SHORTDOT · PRUEBAS PÚBLICAS .icu

ShortDot zone evidence

The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.

ShortDot SA · Luxembourg 7 zonas · pruebas de las zonas completas actualizadas a diario Abrir el repositorio de pruebas de ShortDot
ICANN OVERSIGHT

Acreditación y contexto RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

La acreditación es un contrato, no un sello de seguridad. Verificar las tasas de ICANN Leer el RAA §3.18 PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Accountability draft No se envía nada automáticamente.
Tecnologías · 11 identified
PHP
Programming languages

PHP is a general-purpose scripting language used for web development.

php.net 100 % de confianza
Bootstrap
UI frameworks

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

getbootstrap.com 100 % de confianza
LiteSpeed
Web servers

LiteSpeed is a high-scalability web server.

litespeedtech.com 100 % de confianza
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com 100 % de confianza
jQuery
JavaScript libraries

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jquery.com 100 % de confianza
Google Hosted Libraries
CDN

Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.

developers.google.com 100 % de confianza
Font Awesome
Font scripts

Font Awesome is a font and icon toolkit based on CSS and Less.

fontawesome.com 100 % de confianza
FancyBox
JavaScript libraries

FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.

fancyapps.com 100 % de confianza
cdnjs
CDN

cdnjs is a free distributed JS library delivery service.

cdnjs.com 100 % de confianza
Popper
Miscellaneous

Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.

popper.js.org 100 % de confianza
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100 % de confianza
Detected via Cloudflare Radar · Wappalyzer engine
Denunciar este dominio Envía pruebas y ayuda a proteger a los demás

Análisis de VirusTotal

12 / Los proveedores de seguridad de 91 marcaron este dominio
View on VT
Last analyzed Previous stored snapshot: 7 detections
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Netcraft
SOCRadar
desenmascara.me

Evidencias archivadas

Wayback Machine Snapshot
Una instantánea histórica está disponible para revisión de evidencia.
View Archive
Análisis del rendimiento del sitio

Google PageSpeed Insights — mobile performance audit of maxbim.icu · checked May 16, 2026

31
Poor
Performance
FCP
2.3s
First Contentful Paint
LCP
9.15s
Largest Contentful Paint
CLS
0.605
Cumulative Layout Shift
TBT
400ms
Total Blocking Time
SI
12.11s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Datos y informes externosIndependent lookups and source reports
Análisis de seguridad
URLScan Analyzed VirusTotal 12 det. ChainPatrol URLQuery 1 det. Gridinsoft 1 trust Scamadviser 0 trust SSL Laboratorios Stored TLS valid CF Radar Open report WOT Comprobador de listas negras URL nula Sucuri SiteCheck Observatorio MDN
Submitted Evidence Snapshot
Sent: Ledger records: 1 Case ID: PD-20260516-6BFECB Recipient: abuse@whiteprivacy.com
Page title stored with report: Home - MaxBim
OSINT e inteligencia
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Rock Sign-in search IntelX crt.sh Certificados WHOIS Wayback Archived
DNS y redes
nslookup.io DNS bgp.tools ASN /Ruta
SEO y dominios
SpyFu Moz DA/PA Ahrefs Enlaces entrantes Análisis en profundidad
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.

Europol
Encuentre el canal de denuncia oficial para su país de la UE
National police directory
PhishDestroy listing review No es un informe policial
Recurso sobre el dominio
Solicite una revisión si es propietario de este dominio y cree que el listado es incorrecto
¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Los delincuentes pueden volver a contactar a las víctimas haciéndose pasar por investigadores, abogados o agentes de recuperación. No pague tarifas por adelantado ni comparta credenciales. Más información sobre el fraude en las ayudas de recuperación →

Informa a las autoridades locales

Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.

directorio de 97 países
Borrador asistido por IA: el proveedor de IA procesa los detalles del incidente Revíselo y envíelo usted mismo
Incrustar este informeRead-only HTML widget
HTML · IFRAME

Incrustar este informe

Comparte esta información sobre amenazas en tu página web o blog

embed.html 
<iframe
  src="https://phishdestroy.io/es/embed/domain/maxbim.icu"
  title="PhishDestroy threat report for maxbim.icu"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Una carta de agradecimiento muy sincera

Generador de borradores satíricos

Destinatario
Contexto de las tarifas

Borrador satírico. Las cifras de las tarifas son estimaciones; no se afirma que correspondan exactamente a este dominio.