gwcn87x[.]life

The domain gwcn87x.life was registered on February 21, 2026 through URL Solutions, Inc. and remains active as of the report date. It is classified as a generic phishing site and assigned a high risk level. The web server returns HTTP 200 responses and the page title is identical to the domain, indicating a deliberately crafted landing page.

Infrastructure analysis reveals that gwcn87x.life resolves to the IPv4 address 186.2.165.69, which is hosted by Iqweb LLC in the United Arab Emirates. Authoritative nameservers are ns1.pananames.com, ns2.pananames.com, ns3.pananames.com, and ns4.pananames.com, all of which are typical of low‑cost DNS hosting services. The SSL certificate is labeled “R10”, and the Gridinsoft trust score is 0 out of 100, reflecting an extremely low reputation. The domain appears on one security blocklist and is actively blocked by PhishDestroy.

Threat intelligence feeds indicate that 2 of 95 security vendors on VirusTotal have flagged the domain, providing limited but corroborating evidence of malicious activity. No additional intelligence regarding the specific brand, service, or credential‑capture kit being spoofed is available, leaving the exact phishing lure uncertain. The combination of a fresh registration date, low trust scores, and minimal vendor detections suggests an early‑stage malicious campaign that may evolve quickly.

Defenders should treat gwcn87x.life as hostile. Immediate mitigation steps include adding the domain and its resolving IP address (186.2.165.69) to network deny lists, updating intrusion detection signatures to flag HTTP 200 responses from this host, and monitoring DNS queries for the associated Pananames nameservers. Additional measures such as sinkholing the domain, conducting threat‑hunts for related credential‑harvesting activity, and continuously re‑evaluating the indicator set are recommended to reduce exposure to potential phishing attacks.