firstonlineroyalbanks[.]xyz

Multiple indicators suggest elevated risk at the time of this scan. The domain was categorized by multiple web-classification providers as phishing or fraud-related, and 12 out of 91 security engines flagged it for phishing, malicious, or suspicious activity. In addition, one major blacklist source listed the site for social engineering. These findings are especially concerning because the page is themed as a banking enrollment portal and requests highly sensitive identity and account information.

The domain age is another notable risk factor: it was created on the same day as the scan, which is uncommon for legitimate financial institutions. The combination of a brand-like banking name, a very new domain, lack of established popularity, and a form asking for personal identifiers and credentials may be consistent with credential harvesting or financial phishing. Although the malware scan did not detect malicious files at the time of this scan, phishing pages often rely on deceptive forms rather than downloadable malware.

Based on these findings, this website may pose potential risks to visitors.