apasac[.]com

The domain apasac.com is currently classified as a high‑risk generic phishing site. It was registered on 21 February 2026 via NameCheap, Inc. and is still active as of 12 July 2026. The domain appears on a single public blocklist and has been explicitly blocked by PhishDestroy, indicating that security operators have observed malicious use.

Technical resolution shows the domain resolves to 64.22.104.15, an IP owned by Network Transit Holdings LLC located in the United States. Authoritative nameservers ns1.apasac.com and ns2.apasac.com resolve to the same address, confirming a single‑point hosting setup. The web server presents a valid Let's Encrypt certificate (R12) and returns HTTP 200. Fingerprinting reveals a WordPress stack backed by MySQL, PHP, Apache HTTP Server, and front‑end libraries jQuery and jQuery Migrate.

The site’s HTML title reads “Apasac | Gestión de comercio exterior,” mimicking a legitimate foreign‑trade service, which suggests a credential‑harvesting front‑end. The MX record points to apasac-com.mail.protection.outlook.com, a Microsoft‑hosted mail endpoint, a pattern often used to capture victim credentials through spoofed login pages. VirusTotal analysis shows 4 out of 95 scanners flag the domain as malicious, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment.

While the public record does not contain specific victim reports or a disclosed phishing kit, the combination of recent registration, high‑risk classification, and the observed infrastructure is consistent with a newly deployed phishing campaign. Defenders should add apasac.com to outbound and inbound blocklists, monitor DNS queries for the associated IP and nameservers, and consider sinkholing traffic to disrupt credential collection. Continuous re‑inspection of the domain’s content and TLS certificates is advised, as attackers may modify the site to evade detection.