apexcapitalbnk[.]com

Analysis of apexcapitalbnk.com indicates a phishing domain targeting Spanish-speaking users with a fraudulent online banking portal. The domain was registered on February 21, 2026, through Web Commerce Communications Limited and resolved to IP 107.173.193.235 on AS36352 (HostPapa, US-based hosting). Nameservers ns100.webnic.cc and ns101.webnic.cc were in use at the time of takedown. The page title, 'Ápice de Capital del Banco banca en Línea de soluciones de estados UNIDOS,' suggests an attempt to impersonate a financial institution offering online banking services, though no specific legitimate brand is confirmed in the available data.

The domain lacked an SSL certificate, increasing the likelihood of interception of submitted credentials. As of the last scan, the domain appeared on one security blocklist (PhishDestroy) and was marked offline. No detections were recorded by the 93 vendors that previously scanned the domain on VirusTotal, though this does not confirm safety.

Defenders should treat this domain as high-risk for credential harvesting, particularly for users accessing Spanish-language banking services. Recommended actions include blocking the domain and IP at perimeter controls, monitoring for related infrastructure (e.g., HostPapa AS36352 ranges), and alerting users to the risk of fraudulent banking portals. Further investigation into the registrar (Web Commerce Communications Limited) and nameserver patterns may reveal additional linked domains.