gwbp80x[.]life

The domain gwbp80x.life was registered on 21 February 2026 through URL Solutions, Inc. It is currently active and serves HTTP 200 responses with the page title “GET‑X”. Security intelligence classifies it as a generic phishing site. The domain appears on one public blocklist and has been flagged by PhishDestroy. Infrastructure analysis shows the domain resolves to IP 186.2.165.69, which is allocated to Iqweb LLC in the United Arab Emirates. The SSL certificate is identified as R10, and the site employs HSTS, reCAPTCHA, and a stack consisting of Node.js, Vue.js, Nuxt.js, and Amazon Web Services. The public DNS configuration lists four nameservers under the pananames.com domain. Threat indicators include a Gridinsoft trust score of 0 out of 100 and a VirusTotal detection rate of 1 out of 95 scanners, indicating at least one vendor has identified malicious behavior. Google Tag Manager and Google Analytics are present, which can be leveraged for tracking but also suggest a legitimate‑looking front end. The low trust score and the presence on a blocklist increase confidence in malicious intent, though the limited detection count leaves some uncertainty about the full payload or campaign scope. Defenders should block or sinkhole gwbp80x.life at the network perimeter and monitor outbound connections to the associated IP address 186.2.165.69. Email gateways should be configured to flag any messages containing links to this domain, and incident response teams should collect HTTP request logs for further forensic analysis. Ongoing observation of the associated IP and related DNS records is advised to detect any rapid changes or additional infrastructure that may be deployed.