The domain maxrutru.com was registered on July 29, 2026 through Dominet (HK) Limited and is currently resolving to the IPv4 address 87.120.104.37. DNS resolution is served by the Cloudflare nameservers indie.ns.cloudflare.com and nitin.ns.cloudflare.com. Analysis of public threat feeds shows the domain is listed on one security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one anti‑phishing consortium has identified malicious use. VirusTotal records reveal that the domain was submitted to 91 scanning engines; none of the engines returned a detection at the time of analysis.
While the lack of detections does not constitute a safety guarantee, it confirms that the domain has not yet been associated with known malware signatures. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing status, or Open Threat Exchange (OTX) references are presently available. Consequently, the operational purpose of the site remains inferred from its classification as a generic phishing infrastructure rather than from observed content.
Defenders should consider the domain high‑risk based on its recent creation, active blocklist presence, and targeting of users through phishing campaigns. Recommended mitigation steps include adding 87.120.104.37 to network deny lists, updating URL filtering rules to block maxrutru.com, and monitoring for any future reputation changes in VirusTotal or other threat‑intel platforms. Continuous observation is advised, as the lack of additional telemetry leaves uncertainty regarding the specific phishing payloads or credential‑harvesting mechanisms employed.