wwwmaxes[.]top

This domain, wwwmaxes.top, is an active phishing infrastructure impersonating Maxis, a major Malaysian telecommunications provider. The site presents itself as a legitimate portal for postpaid plans, home internet services, and other telco offerings, but analysis confirms it is a fraudulent credential and payment harvesting operation. The threat type is classified as generic phishing with a high-risk assessment due to its active status and direct targeting of financial and personal data. Infrastructure analysis reveals the domain was registered through NameMart Pte. Ltd. on June 28, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. It resolves to the IP address 43.134.68.153 and is secured with a Let’s Encrypt SSL certificate, a common tactic to lend false legitimacy. Security vendors on VirusTotal flag the domain as malicious, with 4 out of 95 engines detecting it as phishing-related. Google Safe Browsing further classifies the site under the SOCIAL_ENGINEERING category, indicating it employs deceptive tactics to manipulate users. The page title, 'Maxis: Postpaid Plan, Home Internet and More | Telco Company,' directly mirrors the branding of the legitimate Maxis website, increasing the likelihood of successful user deception. As of the latest verification, wwwmaxes.top remains active and continues to host fraudulent content. Users are strongly advised to avoid interacting with the domain or entering any credentials or payment information. Organizations should block the domain and its associated IP (43.134.68.153) at the network level to prevent access. Individuals who may have engaged with the site should immediately reset passwords, monitor financial accounts for unauthorized activity, and report the incident to relevant cybersecurity authorities. Proactive monitoring of similar domains registered through NameMart Pte. Ltd. or resolving to the same IP range is recommended to identify potential related threats.