encontrar-mapsslf[.]us

On July 29, 2026 the domain encontrar-mapsslf.us was identified as an active generic phishing infrastructure. The domain resolves to the IPv4 address 207.174.212.196 and is served by the authoritative name servers ns1.md-7.webhostbox.net and ns2.md-7.webhostbox.net. VirusTotal reports indicate that 18 of 91 scanning engines have flagged the domain as malicious, reflecting a consensus among multiple security vendors that the site is being used for illicit purposes. The domain is currently listed on one external security blocklist and has been independently blocked by the PhishDestroy mitigation service, confirming that community-driven defenses consider it a threat.

The elevated risk rating derives from the combination of active resolution, multi-vendor detection, and blocklist presence. No public page title or brand-target information is available, limiting attribution to a generic phishing campaign. Consequently, the precise lure or credential-harvesting technique employed by the site remains unknown. Analysts should treat the domain as a high-confidence indicator of compromise and incorporate it into network-level deny lists, DNS sinkhole configurations, and endpoint protection exclusions.

Ongoing monitoring of the IP address and name-server records is advised to detect any potential migration or re-hosting activity. Organizations that have observed outbound connections to this IP should investigate associated traffic for signs of credential theft or payload delivery. The combination of vendor detections and blocklist inclusion suggests that the infrastructure is actively supporting phishing operations, and proactive blocking is recommended to mitigate exposure.