h5[.]lbmaxau[.]vip

The domain h5.lbmaxau.vip has been confirmed as a crypto drainer phishing site. The threat poses an elevated risk level and is designed to trick users into revealing their cryptocurrency wallet credentials or private keys. While the specific brand being impersonated is not publicly disclosed, the domain's structure and naming conventions suggest it may be part of a broader campaign targeting a well-known cryptocurrency service or platform.

Analysis indicates that the domain h5.lbmaxau.vip is flagged by 2 out of 95 security vendors on VirusTotal, resulting in a low detection rate. The domain is registered through NAMECHEAP INC and resolves to the IP address 172.67.194.133. It was created on April 06, 2026, and currently holds a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The domain appears on three security blocklists, further corroborating its malicious nature. Despite the low VirusTotal detection rate, the presence on multiple blocklists and the zero trust score highlight the domain's involvement in malicious activities.

The domain h5.lbmaxau.vip is currently offline, which may indicate that it has been taken down as part of a coordinated takedown effort by security researchers or hosting providers. However, the infrastructure used to register and resolve the domain remains intact, posing a potential risk for future phishing campaigns. Users are advised to avoid any links or communications associated with this domain and to update their security practices to prevent similar threats. Organizations should monitor their networks for any signs of compromise related to this domain and ensure that their security systems are configured to block it.