Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@hetzner.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
lists[.]maxlevine[.]co[.]uk
“Max's lists”
lists.maxlevine.co.uk — Não verificado. Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 5/91 (alphaMountain.ai, CRDF, Fortinet, Gridinsoft, Webroot); URLQuery 4 alerts; PhishDestroy score 65/100. Registrador: Gandi [Tag = GANDI].
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
lists.maxlevine.co.uk is a domain that was used for generic phishing, specifically credential phishing, and is currently taken offline. There is no evidence that it impersonated any particular brand or used a drainer kit. Individuals searching for information about whether lists.maxlevine.co.uk is safe or a scam should be aware that it was classified as a phishing threat and is not currently accessible.
Technical analysis shows that lists.maxlevine.co.uk was registered through Gandi [Tag = GANDI] on March 16, 2020. The domain resolved to IP address 116.203.87.149, which is located in Germany and hosted by Hetzner. The SSL certificate was issued by Let's Encrypt / R12. Detection rates include 1 of 95 VirusTotal vendors flagging the domain as malicious, and it appears on one security blocklist (PhishDestroy). Technologies observed on the site included Nginx, jQuery, hCaptcha, and HSTS. The page title at the time of observation was 'Max's lists', and the Gridinsoft trust score was 0/100.
Anyone who entered credentials on lists.maxlevine.co.uk should immediately change their passwords for any affected accounts, enable two-factor authentication where possible, and monitor for signs of unauthorized access or fraudulent activity. It is also recommended to report any suspicious emails or phishing attempts related to this domain to appropriate security teams or authorities. Taking these steps can help mitigate the risks associated with credential phishing.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | newassets.hcaptcha.com/captcha/v1/6ae4a3c801c9d99b7e0b591e01eb3ddc17b34400/static/hcaptcha.html#frame=challenge&id=0dwh2y5yiore&host=lists.maxlevine.co.uk&sentry=true&reportapi=https%3a%2f%2faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en& |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | hcaptcha.com/1/api.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | newassets.hcaptcha.com/c/f4a4f3a7601bf78800dc1a71a4221d2143bc98c6260e8f27b70113fed5fc4897/hsw.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | newassets.hcaptcha.com/captcha/v1/6ae4a3c801c9d99b7e0b591e01eb3ddc17b34400/static/hcaptcha.html#frame=checkbox&id=0dwh2y5yiore&host=lists.maxlevine.co.uk&sentry=true&reportapi=https%3a%2f%2faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&t |
audit | Hunting_JS_WebAssembly |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Inteligência forense
Tecnologias · 4 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Privacy-focused CAPTCHA alternative.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of lists.maxlevine.co.uk · checked Mar 22, 2026
Evidências e relatórios externos
PD-20260322-5032BE Recipient: abuse@hetzner.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo