Analysis of maxxftye.com shows a recently created domain (registered on July 31, 2026) that is actively resolving to the IPv4 address 87.120.104.24. The registrar listed for the registration is CNOBIN INFORMATION TECHNOLOGY LIMITED, and the domain is served by Cloudflare DNS, as indicated by the authoritative name servers major.ns.cloudflare.com and novalee.ns.cloudflare.com. Threat intelligence sources have labeled the domain as a generic phishing operation and have placed it under investigation, while the operational status remains active.
The domain is currently listed on one security blocklist and is specifically blocked by the PhishDestroy feed, providing concrete evidence that at least one reputable anti‑phishing organization has taken defensive action against it. VirusTotal has scanned the domain with 91 antivirus and URL analysis engines, reporting zero detections; however, the absence of detections does not confirm safety, as many phishing sites evade signature‑based detection. No additional data such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are available, leaving the content and delivery mechanisms of the site uncharacterized.
Given the confirmed blocklist entry, the Cloudflare DNS infrastructure, and the recent creation date, defenders should treat maxxftye.com as a high‑confidence phishing indicator. Recommended actions include adding the domain to network‑level deny lists, monitoring DNS queries for the associated IP address, and reviewing any internal logs for connections to the domain. Continuous re‑evaluation is advised as further telemetry becomes available.