gwcw47x[.]life

The domain gwcw47x.life was registered on February 21, 2026 through URL Solutions, Inc. and is currently active. DNS analysis shows the domain is delegated to four pananames.com name servers (ns1‑ns4.pananames.com) and resolves to the IP address 186.2.165.80, which is hosted in the United Arab Emirates and associated with Iqweb LLC. An HTTP 301 redirect is observed, and the sole page title returned is "GET-X"; no further content has been publicly captured. The site is classified as a tech support scam that impersonates Apple, and forensic inspection linked the infrastructure to a known Gambler Scam phishing kit. Security telemetry indicates the domain appears on one blocklist and has been blocked by PhishDestroy. VirusTotal reports two detections out of ninety‑five scanning engines, and the SSL certificate received an R10 rating, reflecting low trust. Gridinsoft assigns a zero‑point trust score, reinforcing the malicious assessment. While the exact payload or credential‑harvesting mechanisms have not been disclosed, the convergence of brand impersonation, low‑trust TLS, and detection by multiple vendors warrants immediate defensive action. Organizations should add gwcw47x.life to URL filtering and DNS block lists, monitor outbound connections to 186.2.165.80, and consider sinkholing the IP range to disrupt further activity. Continuous monitoring of the associated name servers is advised to detect any replication of the malicious infrastructure.