gwff36x[.]life

The domain gwff36x.life was registered on February 21, 2026 through URL Solutions, Inc. It resolves to four authoritative name servers – ns1.pananames.com, ns2.pananames.com, ns3.pananames.com, and ns4.pananames.com – all belonging to the same hosting provider. The site currently returns an HTTP 301 redirect and presents an SSL certificate identified as R10. Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a lack of reputation. The domain is classified as active and listed on a single security blocklist, with PhishDestroy already flagging it.

Dynamic analysis on VirusTotal shows that two out of ninety‑five scanning engines have flagged the domain for malicious behavior, reinforcing the suspicion of phishing activity. The page title reported by crawlers is “GET‑X”, which does not correspond to any legitimate brand or service, and no additional content has been disclosed. The combination of a low trust score, a self‑signed‑type SSL certificate, and an immediate redirect is consistent with infrastructure patterns observed in high‑risk phishing campaigns. The domain’s risk level is marked as high, and its current status remains active.

Defenders should block gwff36x.life at both DNS and network layers, and incorporate the domain into endpoint and email filtering rules. Continuous monitoring of the associated name servers is advised, as they may host additional malicious payloads or be reused for future campaigns. Incident response teams should treat any traffic to this domain as hostile, quarantine related communications, and investigate any credential or data exposure that may have originated from interactions with the site. Ongoing threat‑intel feeds should be consulted for updates, given the active nature of the infrastructure.