gwde24x[.]life

This domain, gwde24x.life, is actively flagged as a high-risk phishing site targeting users of the Get-X online casino platform, as indicated by its page title ('Гет Икс слоты играть - официальный сайт онлайн - рабочее зеркало Get-x'). Analysis reveals the domain is currently operational, returning an HTTP 301 redirect status, which may indicate an attempt to funnel traffic to a malicious endpoint. Infrastructure details show the domain resolves to IP address 186.2.165.80, hosted on AS59692 (IQWeb FZ-LLC) in the United Arab Emirates. The SSL certificate is issued by DDoS-Guard, a provider frequently associated with bulletproof hosting environments used by threat actors. Registration details point to URL Solutions, Inc., though nameserver information remains unavailable. Security vendors have flagged the domain, with two out of 95 engines on VirusTotal detecting malicious activity, while Gridinsoft assigns a trust score of 0/100. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. Defenders should note the absence of nameserver data may indicate attempts to obfuscate infrastructure or evade detection. The 301 redirect, combined with the use of DDoS-Guard, suggests the site may be part of a larger redirection chain leading to credential harvesting or financial fraud. Immediate action is recommended, including DNS-level blocking of the domain and IP, monitoring for related infrastructure (e.g., subdomains or IPs within the same ASN), and alerting users to avoid interaction with the site. Further investigation into the redirect destination and any associated payment gateways is advised to determine the full scope of the threat.