acrelegacy[.]com

This domain, acrelegacy.com, was registered on March 25, 2025 through NameSilo, LLC and is currently delegated to the nameservers ns13.netlightsystems.com and ns14.netlightsystems.com. DNS resolution returns the single address 86.107.77.158, which is the host observed by multiple security services. The domain appears on one public blocklist and is also listed by the PhishDestroy blocklist, confirming that at least one anti‑phishing feed has taken action against it. VirusTotal analysis shows that four of ninety‑one scanned vendors flagged the domain as malicious, indicating a moderate level of consensus among scanners.

The threat type is identified as generic phishing and the risk assessment is high, with the campaign still active as of the report date, July 27, 2026. Available evidence does not include a page title, SSL certificate details, HTTP response codes, or any brand‑specific references, so the exact content served by the site remains unverified. Nevertheless, the combination of recent registration, dedicated netlightsystems nameservers, and the presence on multiple blocklists suggests a purpose‑built infrastructure for credential harvesting.

Defenders should add acrelegacy.com to outbound URL filtering rules, ensure DNS resolvers block the domain, and monitor for connections to the associated IP address 86.107.77.158. Network intrusion detection signatures that flag traffic to this IP or DNS queries for the domain can reduce exposure. Continuous re‑scanning of the domain with sandbox or URL‑analysis services is recommended to capture any evolution in the payload or hosting changes.