maxharu[.]com

Analysis conducted on August 02, 2026, identifies maxharu.com as an active phishing domain under investigation for credential harvesting. The domain is currently flagged on one security blocklist, specifically PhishDestroy, indicating confirmed malicious classification by at least one vendor. No detections were recorded among the 91 security vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm benign status and may reflect delayed or incomplete coverage. Infrastructure analysis reveals the domain was registered through a privacy-protected registrar, obscuring ownership details.

No associated IP address, autonomous system number (ASN), or hosting provider has been publicly disclosed in available threat intelligence. The domain's SSL certificate status and HTTP response codes remain unconfirmed, limiting further assessment of its operational infrastructure. The exact content hosted on maxharu.com has not been analyzed, and no specific brand impersonation or phishing kit has been identified in the available data. Defenders are advised to treat maxharu.com as a high-risk domain based on its presence on PhishDestroy's blocklist.

Network-level blocking or monitoring of connections to this domain is recommended until additional intelligence confirms or refutes its malicious status. Organizations should correlate logs for any interactions with maxharu.com, particularly those involving credential submission or redirection from suspicious emails. Further investigation is required to determine the scope of the campaign, targeted sectors, and potential victim profiles.