Analysis of mail.mydevicemaps.site shows that the domain was registered on July 20, 2026 through EuroDNS S.A. and is currently hosted on the IP address 96.125.163.17. The authoritative name servers cns59.webhostbox.net and cns60.webhostbox.net resolve the domain, indicating use of the WebhostBox hosting platform. VirusTotal records eight positive detections out of ninety‑one scanned scanners, confirming that multiple security products have identified malicious behavior.
The domain is listed on a single public blocklist and has been actively blocked by the PhishDestroy service, yet it remains operational as of the report date, July 30, 2026. No additional intelligence such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts is available, leaving the exact content and phishing vector unverified. The limited visibility suggests a low‑profile deployment that relies on rapid domain turnover.
Defenders should add the domain and its resolving IP address to network and DNS blocklists, monitor traffic for connections to 96.125.163.17, and consider sinkholing the associated name servers. Continuous scanning with multi‑vendor sandbox services is advisable to capture any future payloads that may be delivered through this infrastructure. Given the active status and existing detections, the domain presents a high‑risk indicator that warrants immediate inclusion in threat‑intelligence feeds.