marylandmy[.]click

PhishDestroy identifies marylandmy.click as a HIGH-RISK generic phishing domain actively exploiting social engineering tactics to deceive users and steal sensitive information.

This domain poses as a legitimate service but is specifically engineered to harvest credentials or financial data. Technical indicators reveal a newly registered domain (March 25, 2026) with a Let's Encrypt SSL certificate, registered through DYNADOT LLC. It resolves to IP 91.92.21.9 and is flagged by Google Safe Browsing under SOCIAL_ENGINEERING. Security vendors (VirusTotal) rate it at 12/95 detections, while one active blocklist has already blacklisted the domain. The combination of fresh registration, low VT coverage, and active phishing operations suggests this is part of a rapidly evolving campaign.

As of the latest scan, marylandmy.click remains ACTIVE and unresolved. Immediate mitigation includes DNS blocking via InversionDNS and user awareness campaigns to avoid interaction. Despite partial vendor coverage, the site retains HIGH risk due to its social engineering focus and recent infrastructure. Until takedown or deactivation occurs, users should treat all links from this domain as malicious, with no safe interaction possible.