gwcp24x[.]rest

The domain gwcp24x.rest has been identified as a generic phishing threat with an elevated risk level. No specific brand or drainer kit is associated with this domain. The infrastructure analysis reveals that the domain is registered through URL SOLUTIONS INC. and resolves to the IP address 91.215.43.30. It was created on May 08, 2025, and has been flagged by 4 out of 95 security vendors according to VirusTotal. The Gridinsoft trust score for this domain is 0/100, indicating a highly untrusted web resource. The domain currently appears on one security blocklist, further underscoring its malicious intent.

Technical indicators for gwcp24x.rest include a VirusTotal detection score of 4/95, a registrar of URL SOLUTIONS INC., an IP address of 91.215.43.30, and a creation date of May 08, 2025. The domain's status on Gridinsoft's Safe Browsing (GSB) is marked as untrusted, and it is listed on one security blocklist. These indicators suggest that the domain was likely used for distributing phishing content or redirecting users to malicious sites.

The domain is currently offline, which may indicate that it has been taken down by authorities or the registrar in response to security alerts. Despite its offline status, the remaining infrastructure and historical data suggest that there is still a risk of the domain being reactivated or reused for similar malicious activities. Security teams and network administrators are advised to maintain blocking measures and monitor for any signs of the domain coming back online. Regular updates to security policies and user education on recognizing phishing attempts can further mitigate potential risks.