gwcw16x[.]life

This domain is flagged as a high-risk brand impersonation targeting Ethereum, classified under cryptocurrency scam type. Registered on February 21, 2026, through URL Solutions, Inc., the domain remains active as of July 12, 2026. It resolves to IP address 186.2.165.80, hosted in the United Arab Emirates by Iqweb LLC. The page title retrieved is GET-X, and the site employs a known phishing kit labeled Gambler Scam. Infrastructure analysis reveals nameservers hosted on Pananames (ns1 through ns4.pananames.com), with an SSL certificate from R10. The HTTP response returns a 301 redirect status, suggesting the domain may route users through an intermediary before delivering malicious content. VirusTotal data shows 2 out of 95 security vendors flagging the domain, and it appears on one security blocklist. The Gridinsoft trust score is 0 out of 100, indicating no confidence in its legitimacy. The phishing kit identified suggests the site is designed to harvest cryptocurrency credentials or wallet access, specifically targeting Ethereum users. However, the exact page content beyond the title GET-X has not been analyzed, so the specific lure or method of impersonation remains unverified. The active status and presence on a single blocklist imply limited but ongoing detection. Defenders should treat this domain as an active threat. Recommended actions include blocking the domain at DNS and web proxy levels, monitoring for related domains under the same Pananames infrastructure or Gambler Scam kit, and alerting users to avoid interacting with any URLs from gwcw16x.life. Since the domain is registered through URL Solutions, additional investigation into the registrant details may aid in uncovering broader scam operations. The combination of a low trust score, cryptocurrency brand targeting, and known phishing kit usage strongly indicates malicious intent, warranting immediate containment measures.