# m.gmacworld.vip — MALICIOUS

> PhishDestroy identifies m.gmacworld.vip as a crypto-draining brand impersonation domain. 13/95 VirusTotal vendors flag this GMAC-related site.

## Summary
PhishDestroy identifies m.gmacworld.vip as an active brand-impersonation domain designed to steal user credentials through the guise of GMAC loan services. This mobile-focused subdomain (m.gmacworld.vip) mimics the legitimate GMAC website to deceive borrowers into entering sensitive login or payment details. Security telemetry confirms that the domain actively resolves to IP address 188.114.96.3 and serves fake forms intended to harvest financial or personal information under the false pretense of loan management.

This domain was flagged by 13 out of 95 participating VirusTotal security vendors, indicating elevated malicious detection. It was registered through Dynadot Inc on August 07, 2025, and currently holds a Google Trust Services SSL certificate. The new registration and rapid deployment of phishing content suggest opportunistic targeting of individuals seeking GMAC financial services. The elevated risk level is further supported by the low VT detection ratio, which leaves many users unprotected without proactive blocklist adoption.

If you visited m.gmacworld.vip, cease all interaction immediately. Do not enter any login credentials, payment data, or personal information. Check your device for unauthorized transactions or malware. Clear browser cache and cookies related to GMAC or financial services. Report any suspicious activity to your financial institution and file a report with your local cybercrime unit. Always access GMAC services directly via the official gmac.com domain or trusted financial portals.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-07 06:15:36
- Registrar: Dynadot Inc
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1e8ba860-b174-46a9-815f-895cae792136
- PhishDestroy: https://phishdestroy.io/domain/m.gmacworld.vip/
- LLM endpoint: https://phishdestroy.io/domain/m.gmacworld.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/m.gmacworld.vip/
Last updated: 2026-03-23