lmaxdigital[.]vip

The domain lmaxdigital.vip has been identified as a confirmed phishing site engaged in brand impersonation of Coinbase, a major cryptocurrency exchange. This threat is classified as high-risk and has since been taken offline, but users should remain vigilant as similar domains may still be active. The site was discovered with a page title of "Rocket" and was designed to deceive visitors into believing they were interacting with legitimate Coinbase services, likely to steal login credentials or deploy a crypto drainer.

Technical analysis reveals that lmaxdigital.vip was flagged by 17 out of 95 security vendors on VirusTotal, indicating widespread detection as malicious. The domain was registered through Dynadot Inc on December 12, 2025, and resolves to IP address 188.114.96.3. Its SSL certificate is issued by WE1, and it appears on 3 security blocklists. These indicators collectively confirm the domain's malicious intent and its association with phishing campaigns targeting Coinbase users.

As the site is currently offline, immediate risk is reduced, but PhishDestroy recommends that all users who may have encountered lmaxdigital.vip change their Coinbase passwords and enable two-factor authentication immediately. Always verify URLs carefully before entering sensitive information, and report any suspicious domains to relevant security authorities. For ongoing protection, rely on reputable security tools and stay informed about emerging phishing threats targeting cryptocurrency platforms.