mail[.]maplelifefcu[.]com

Analysis of the domain mail.maplelifecu.com indicates active credential phishing targeting financial institution customers. The domain, registered on February 21, 2026, through NameSilo, LLC, resolves to IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the United States. Nameservers ns1.bthostcloud.com and ns2.bthostcloud.com are associated with the infrastructure, which employs LiteSpeed and HTTP/3 technologies. The SSL certificate is issued by Let's Encrypt (YE1), a common choice for both legitimate and malicious sites. The page title, 'Maple Life Federal Credit Union,' suggests an attempt to impersonate a credit union, though no direct confirmation of the targeted brand's legitimacy or prior compromise is available. The domain holds a Gridinsoft trust score of 0/100 and appears on one security blocklist, with eight of ninety-three vendors on VirusTotal flagging it as malicious. The HTTP status returns 200, confirming the site is currently accessible. Infrastructure analysis reveals the domain was created five months prior to this report, a timeframe consistent with phishing campaigns designed to evade immediate detection. The use of bulletproof hosting providers or resellers cannot be ruled out, given the persistence of the site despite blocklist inclusion. Defenders should treat this domain as high-risk and implement blocking at the DNS or network level. Further investigation into associated IP ranges and nameserver patterns may reveal additional linked infrastructure. The exact content and functionality of the phishing kit remain unanalyzed, limiting definitive conclusions about payload delivery mechanisms.