mail[.]myfindsupported[.]com

mail.myfindsupported.com was observed on July 29, 2026 as an active generic phishing infrastructure with an elevated risk rating. The domain was registered through NameSilo, LLC on April 25, 2026 and resolves to the IPv4 address 207.174.212.196. Authoritative name servers are ns1.md-7.webhostbox.net and ns2.md-7.webhostbox.net, which points to the WebhostBox hosting environment. According to the available intelligence, the domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing service has taken action against it.

VirusTotal analysis shows that 15 of 91 security vendors have flagged the domain as malicious, providing a modest but consistent detection signal across multiple scanners. No additional data such as SSL certificate information, HTTP status codes, Safe Browsing verdicts, or page title content is present in the current dataset, so the specific phishing vector, targeted brand, or credential‑capture page layout remains unknown. The limited visibility suggests a recently created infrastructure that may be leveraging fast‑flux or disposable domains to evade long‑term detection. Security teams should also query passive DNS repositories for historical resolutions of the IP address and hostnames, which can uncover prior usage patterns.

Defenders should immediately add the domain name and its hosting IP to network deny lists, enforce outbound filtering for connections to the identified name servers, and incorporate the domain into internal threat‑intel feeds. Ongoing monitoring for DNS queries, newly observed sub‑domains, or related hostnames on the same name servers is recommended, as future observations may reveal additional malicious activity or payload delivery mechanisms. If a sample of the landing page is obtained, it should be submitted to sandbox environments for dynamic analysis to identify any downloader or credential‑stealing scripts.