gacancersupport[.]com

PhishDestroy identified gacancersupport.com as a credential phishing domain targeting Spanish-speaking users under a generic support guise. The site's title 'Iniciar' suggests a login page designed to harvest user credentials, though no specific brand or drainer kit was identified. The threat type is generic_phishing, with a risk level of high, indicating significant potential for data theft.

Technical analysis reveals that the domain was created on August 18, 2011, but only recently weaponized for phishing. It resolves to IP 13.72.110.24 and is registered through GoDaddy.com, LLC. VirusTotal flagged this domain with a score of 21/95 security vendors, confirming malicious activity. Google Safe Browsing lists it as phishing, and it appears on one security blocklist. SSL certificate is from Let's Encrypt (R12), and AlienVault OTX includes it in two threat intelligence pulses, indicating broader community detection.

The domain status is taken_down, meaning the phishing infrastructure has been neutralized. However, residual risks remain as users who previously interacted with the site may have had their credentials compromised. PhishDestroy advises monitoring for credential misuse and enabling multi-factor authentication. No further action is required from hosting providers, but users should remain vigilant against similar spoofed support pages.