Highscore 50 · flagged Thursday, September 10, 2026

maysupport.online

Appeared in the .online zone on Thursday, September 10, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

lure words (login, verify, secure…)
matched: support
+6
page asks for credentials
matched: Sign in to your account
+30
login form
matched: has_form+login words
+14
Registrar
Nameserver provider
Nameservers
dns1.registrar-servers.com, dns2.registrar-servers.com
First-day state
active website
HTTP status
200
Page title
Maybank | Login
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like phishingtarget: Maybankconfidence 93%· claude-opus-5

Page titled "Maybank | Login" reproduces Maybank's logo, yellow branding and "Humanising financial services" tagline with a username/password form plus an OTP "confirm this session" verification step and a fake account dashboard — a full credential+2FA capture flow on a GitHub-Pages-hosted 'maysupport.online' domain unrelated to the bank; the "financial prototype / fictional data" labels are cover, not legitimacy.

First passlooks like phishingtarget: Maybankconfidence 98%· claude-haiku-4-5

Page title and all branding (logo, tagline 'Humanising financial services', yellow color scheme) impersonate Maybank, a Malaysian bank. The domain maysupport.online hosts a credential-capture form (username/password) that posts to itself with no legitimate bank links, matching the sealed-room phishing pattern. The page displays fake dashboard content labeled 'FINANCIAL PROTOTYPE' to appear authentic while stealing login credentials.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, September 10, 2026

Screenshot of maysupport.online taken by the zone census on 2026-09-10

Same data as JSON: /api/zone/domain/maysupport.online. This page is not indexed by search engines and does not link to the site it describes.