acepymt[.]com

This domain, acepymt.com, is actively engaged in credential harvesting phishing operations designed to mimic legitimate reCAPTCHA verification pages. Analysis indicates the site targets users by presenting a fraudulent interface that collects sensitive authentication details, including usernames, passwords, and potentially multi-factor authentication codes. The domain employs social engineering tactics to deceive visitors into submitting credentials under the guise of a security verification process, which are then exfiltrated to attacker-controlled infrastructure. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on June 16, 2026, through OwnRegistrar, Inc., and currently resolves to the IP address 37.77.150.237, hosted on AS198953 (Proton66 OOO) in Russia. Security vendor detections on VirusTotal stand at 6/95, with three independent security blocklists listing the domain as malicious. The site uses a Let's Encrypt SSL certificate (YR2), which, while providing encryption, does not validate the legitimacy of the content. Additional technical indicators include its presence on PhishDestroy, MetaMask, and SEAL blocklists, further confirming its role in phishing campaigns. Users who have visited acepymt.com or interacted with its content should immediately take remedial actions. Any credentials entered on this site must be considered compromised and should be changed across all platforms where they were reused. System scans using updated endpoint detection tools are recommended to identify potential secondary infections. Network traffic logs should be reviewed for connections to 37.77.150.237 or related domains registered through OwnRegistrar. Organizations should update their web filtering solutions to block both the domain and its resolving IP to prevent further exposure.