maxcashwin[.]com

Analysis of maxcashwin.com reveals that the domain is currently offline but was previously used for a brand impersonation campaign targeting the Blast brand. The domain was registered on August 15, 2025 through Key-Systems GmbH and is hosted on an OVH SAS server in Germany (AS16276) at IP address 57.129.97.29. Infrastructure inspection shows the domain resolves to this IP and uses Cloudflare name servers adam.ns.cloudflare.com and adi.ns.cloudflare.com. No SSL certificate is present, indicating that the site operated without HTTPS encryption. The page title captured from the site reads "MAXCASHWIN | Enter the world of sport and stakes!", which aligns with the known "Gambler Scam" phishing kit associated with this campaign.

Reputation data indicate that the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal scans show three of ninety‑five security vendors flagged the domain, reinforcing its malicious nature. The Gridinsoft trust score is 1 out of 100, reflecting an extremely low trust rating. The identified scam type is brand impersonation, specifically impersonating Blast, and the site is classified as a brand impersonation threat.

Uncertainty remains around the exact page content and any active payload, as the site is no longer reachable for direct inspection. Defenders should continue to block traffic to the IP 57.129.97.29, enforce DNS filtering for maxcashwin.com, and monitor for any re‑registration attempts. Adding the domain to internal blocklists and updating web filtering rules will mitigate the risk of end‑user exposure. Continuous surveillance of the associated IP range and Cloudflare name servers is recommended to detect possible re‑use in future campaigns.