mail[.]maps-findme[.]us

Analysis conducted on July 30, 2026, identifies mail.maps-findme.us as an active high-risk phishing domain targeting user credentials. The domain currently resolves to IP address 96.125.163.17, though infrastructure analysis reveals an anomalous nameserver configuration labeled NS_NOT_FOUND, suggesting potential misconfiguration or deliberate obfuscation of hosting details. At the time of assessment, the domain remains operational and has not been suspended by its registrar. Detection data indicates moderate but growing concern among security vendors. Seven of ninety-one engines on VirusTotal flag the domain as malicious, while PhishDestroy has implemented a block.

The domain also appears on one additional security blocklist, reinforcing its classification as a phishing threat. No Safe Browsing or Open Threat Exchange (OTX) data is currently available for this domain, limiting broader contextual assessment. The exact content and target of the phishing page remain unconfirmed, as no brand, kit, or page title details were provided in available intelligence. While the domain name includes the term 'mail', this does not conclusively indicate impersonation of a specific email provider or service.

Defenders should treat this domain as a generic credential-harvesting site until further analysis of page content is completed. Organizations are advised to block mail.maps-findme.us at the DNS and network perimeter levels. Security teams should monitor logs for connections to 96.125.163.17 and correlate with user reports of suspicious email or web activity. Given the domain's unresolved nameserver status and active detection by multiple vendors, continued monitoring is recommended to assess potential shifts in hosting or evasion tactics.