gassafor[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

Analysis indicates that gassafor.com was registered on May 11 2026 through Soluciones Corporativas IP SL and currently resolves to IP address 193.70.22.241 located in ES. The domain uses nameservers ns1.deprueba.es and ns2.deprueba.es along with an SSL certificate issued by Let's Encrypt R13. HTTP responses return status code 302 indicating an immediate redirect. The observed page title Inicio - Disgas matches the branding of a known energy services provider and supports the classification of generic phishing activity.

Multiple detection sources have recorded the domain. It appears on one security blocklist, receives a Gridinsoft trust score of 35 out of 100, and is referenced in a single AlienVault OTX threat intelligence pulse. VirusTotal reports that one of 95 vendors flags the domain. The domain remains listed as active with high risk level and continues to be blocked by PhishDestroy at the time of this report.

Infrastructure details show the domain is hosted on OVH Hispano resources while the 302 redirect behavior prevents direct inspection of final landing content. Registration age of approximately two months is consistent with patterns observed in other short-lived phishing operations. No additional ASN or brand kit indicators are present in the available data.

Defenders should block the IP 193.70.22.241 and the domain gassafor.com at network and endpoint layers. Organizations protecting Disgas users are advised to add the domain to internal blocklists and monitor for similar redirects using the same nameserver pair. Continued observation of the single blocklist appearance and OTX pulse is recommended to track any infrastructure reuse.