gwea13x[.]life

Analysis of gwea13x.life indicates that the domain was actively used for a generic phishing campaign before being taken offline. The site was observed with the page title "GET-X" and was flagged by two of ninety‑five VirusTotal scanners, showing that at least a minority of security vendors detected malicious behavior. PhishDestroy has already added the domain to its blocklist, and it also appears on one additional security blocklist, reinforcing the consensus that the domain is hostile. The registrar listed is URL Solutions, Inc., and the domain was created on February 21, 2026, suggesting a short operational window typical of fast‑flux phishing infrastructure.

DNS resolution is served by four Pananames nameservers (ns1‑ns4.pananames.com), a common choice for disposable or quickly‑registered domains. The SSL certificate presented is labeled "R11", which does not correspond to a recognized public‑trusted CA, further indicating a low‑trust environment. Gridinsoft’s trust score for the domain is 0 / 100, the lowest possible rating, confirming its malicious nature.

Current HTTP status shows the site is offline, so real‑time content cannot be inspected, and no additional page details beyond the title are available. Defenders should continue to block the domain at perimeter and endpoint layers, ensure that any cached URLs or hash‑based indicators are retained in threat intel feeds, and monitor the associated nameservers for re‑registration of similar domains. Because the domain is recent and was quickly taken down, future campaigns may reuse the same registrar or naming pattern; continuous surveillance of newly registered .life TLDs from URL Solutions, Inc. and similar Pananames name server configurations is advisable.