secure-ar-pacific[.]com

PhishDestroy analysts have identified a live credential-phishing operation hosted at secure-ar-pacific.com, which is actively impersonating A&R Pacific in an attempt to trick users into surrendering their account credentials. The domain resolves to IP 76.223.105.230 and currently presents a spoofed login page that closely mirrors the legitimate A&R Pacific interface. Threat actors are leveraging this convincing replica to harvest usernames, passwords, and potentially multi-factor authentication tokens, enabling subsequent account takeovers and unauthorized access to sensitive corporate or personal resources. This domain was flagged on May 02, 2026—only days ago—via GoDaddy.com, LLC, and is already operational despite zero detections on VirusTotal as of the latest scan. The SSL certificate, issued by GoDaddy.com, lends a false sense of legitimacy to the site, increasing the likelihood of successful deception. At present, no major blocklists have flagged this domain, leaving users and organizations exposed to potential credential theft. Given its recent registration and clean reputation score, this phishing page poses an immediate and evolving threat to any individual or entity expecting to interact with A&R Pacific services. If you have visited secure-ar-pacific.com or entered any credentials after seeing the page title 'A&R Pacific', cease use of those credentials immediately and perform a full password reset on all associated accounts. Enable multi-factor authentication where available and scan local systems for malware or unauthorized access. Report the domain to PhishDestroy and block 76.223.105.230 at your network perimeter to prevent further exposure. Monitor financial accounts and corporate systems for signs of compromise, as stolen credentials may be leveraged within hours of capture.