maps-findme[.]us

Analysis as of July 30 2026 indicates that the domain maps-findme.us is actively being used for phishing. The domain resolves to the IPv4 address 96.125.163.17 and is served by the nameservers cns59.webhostbox.net and cns60.webhostbox.net, which are associated with the Webhostbox hosting provider. The domain appears on at least one public security blocklist and is explicitly blocked by the PhishDestroy mitigation service, confirming that it has been identified by multiple defensive platforms. VirusTotal has recorded detections from eight of ninety‑one scanned security vendors, demonstrating that a non‑trivial portion of the industry has observed malicious characteristics.

No additional public evidence such as Safe Browsing verdicts, Open Threat Exchange (OTX) indicators, registrar information, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title metadata are available in the current intelligence set, leaving those aspects of the infrastructure unverified. The lack of publicly disclosed SSL or HTTP status may indicate that the site operates over plain HTTP, but this cannot be confirmed without direct probing. Defenders should treat the domain as high‑risk and enforce blocking at network perimeter, DNS filtering, and endpoint protection layers.

Monitoring of the hosting IP 96.125.163.17 for any ancillary malicious activity is recommended, as is periodic re‑query of VirusTotal and blocklist feeds to capture any changes in detection count. Organizations that employ email security gateways should add maps-findme.us to their phishing‑domain blocklist to prevent credential harvesting attempts. Continuous observation of the associated nameservers may reveal additional domains that share the same infrastructure, enabling broader threat‑intel correlation.