gastipins[.]com

PhishDestroy identifies gastipins.com as an active credential theft domain, currently serving a fake reCAPTCHA verification page designed to steal login credentials. This site impersonates the widely used reCAPTCHA security challenge, tricking users into entering sensitive information under the guise of bot verification. The domain was created on June 12, 2026, and remains active, posing an ongoing threat to anyone who encounters it.

Technical indicators confirm the malicious nature of gastipins.com. It is flagged by 5 out of 95 VirusTotal security vendors, appears on three security blocklists, and has a low trust score. The domain resolves to IP address 37.77.150.237 and uses an SSL certificate issued by Let's Encrypt (YR2), which is common for both legitimate and malicious sites. It was registered through OwnRegistrar, Inc., a registrar often associated with suspicious domains. These factors collectively indicate a high risk of credential theft.

Given the active status and high risk level, users should avoid interacting with gastipins.com entirely. If encountered, do not enter any information and close the page immediately. Organizations should block the domain at the network level and report it to relevant security vendors. PhishDestroy recommends ongoing monitoring for related domains and educating users about fake CAPTCHA phishing tactics.