maxcuru[.]com

Analysis of maxcuru.com, created on 31 July 2026 and hosted at IP 87.120.104.37, shows that the domain is currently active and resolves to a single address. Registration was performed through Dominet (HK) Limited, a Hong Kong‑based registrar. The domain is listed on the PhishDestroy blocklist, indicating that at least one security feed has flagged it as malicious.

VirusTotal records show the domain was submitted to 91 antivirus and URL‑reputation engines, none of which raised a detection at the time of scanning; this absence of detections does not constitute a safety indication. The authoritative name servers are ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, and savanna.ns.cloudflar, suggesting use of Google Cloud DNS and Cloudflare services for redundancy. No public SSL certificate details, HTTP response codes, page title, or observed content have been published, leaving the payload and target brand undefined.

Consequently, the observable infrastructure points to a newly registered domain that is already being used in a generic phishing campaign, but the specific phishing kit or victim lure remains unknown. Defenders should block or monitor traffic to 87.120.104.37 and add maxcuru.com to local deny lists, continue to watch for any new detections on threat‑intel platforms, and consider sink‑holing the domain if possible. Ongoing observation of the registrar and name‑server changes is recommended to detect potential pivoting or re‑hosting.