gwal58x[.]life

This domain, gwal58x.life, is currently active and returns an HTTP 301 redirect. DNS resolution points to 186.2.165.80, an address allocated to AS59692 (IQWeb FZ-LLC) located in the United Arab Emirates. The site presents a TLS certificate issued by ddos-guard, indicating the use of a generic protection service rather than a legitimate CA. Reputation scoring from Gridinsoft assigns a zero‑point trust rating (0/100). Independent analysis on VirusTotal shows that 2 of 95 scanning engines have flagged the domain, confirming malicious intent. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. Registration details reveal the registrar as URL Solutions, Inc., but no further WHOIS data are provided. The page title returned by the server is identical to the domain name, offering no additional context about the content or target. At present, no public samples of the payload or phishing landing page have been released, leaving the specific campaign tactics unknown. Defenders should block the domain at DNS and proxy layers, monitor outbound connections to the associated IP, and consider adding the address to internal IOC lists. Continuous re‑evaluation is advised, as the infrastructure may evolve or serve additional malicious payloads.