marylandpost[.]us

The domain marylandpost.us is currently classified as a high‑risk generic phishing site. It has been added to the PhishDestroy blocklist and is listed on one public security blocklist. VirusTotal records indicate that three of ninety‑five security scanners have flagged the domain, and the Gridinsoft trust score is recorded as zero out of one hundred, underscoring a low confidence rating for legitimate use. The page title returned from the HTTP response is simply "marylandpost.us," and the HTTP status code is 200, confirming that the site is actively serving content.

Infrastructure analysis shows the domain was registered on August 12, 2025 through ABOVE.COM PTY LTD. Authoritative DNS records point to ns11.abovedomains.com and ns12.abovedomains.com as the responsible name servers. The domain resolves to the IPv4 address 199.59.243.228, which is mapped to an autonomous system owned by a major cloud provider (AS16509). Geolocation places the IP in the United States. TLS is enabled via a publicly trusted certificate authority, indicating that encrypted connections are accepted by the server.

While the available intelligence confirms the existence of a live web service and provides concrete infrastructure details, the actual content of the site beyond the page title has not been disclosed. No specific phishing kit, credential harvesting form, or targeted brand is identified in the current dataset. Consequently, the precise method of victim interaction and the extent of data exfiltration remain uncertain.

Defensive operators should prioritize immediate mitigation actions. Adding marylandpost.us to DNS blocklists and firewall deny lists will prevent client resolution. Network sensors should be configured to monitor outbound connections to 199.59.243.228 and associated CIDR ranges, and any attempted connections should be logged and investigated. Continuous re‑evaluation is advised, as additional detection data may surface that clarifies the payload and victim profile.