acir[.]postofficeweb[.]com

This domain, acir.postofficeweb.com, is flagged as a high-risk generic phishing site as of July 12, 2026. The domain resolves to IP 44.255.152.161, hosted on Amazon Web Services (AWS EC2) in the US West region (us-west-2). It was registered on January 31, 2016, through Amazon Registrar, Inc., and uses Amazon S3 with Nginx and HSTS technologies. The SSL certificate is issued by Amazon RSA 2048 M04. VirusTotal analysis shows 19 of 91 security vendors flagging this domain as malicious, and it appears on two security blocklists (PhishDestroy and PhishingDB). Trustworthiness scores are critically low: Scamadviser rates it 1/100 and Gridinsoft rates it 0/100. The page title returned a 502 Bad Gateway error, indicating the phishing content may be temporarily unavailable or behind a gateway issue. The domain remains active and accessible (HTTP status 200), suggesting the infrastructure is operational but the phishing page itself may be loading intermittently. Defenders should block all traffic to this domain at the DNS and network level, monitor for related subdomains or IPs, and ensure any users who accessed the site are cautioned not to enter credentials or sensitive information. The exact nature of the phishing campaign is not yet determined from available data, but the high detection rate and low trust scores confirm malicious intent.