gwbi87x[.]life

The domain gwbi87x.life is currently active and serves content that returns HTTP 200 with the page title "GET‑X". The site is registered through URL Solutions, Inc. and is protected by a Let\'s Encrypt R12 certificate. Gridinsoft assigns it a trust score of 0/100, indicating no confidence in its legitimacy. Network analysis shows the domain resolves to IP 91.215.43.30, which belongs to AS57724 DDOS‑GUARD LTD and is geolocated in Russia. The same IP hosts services built on Node.js, Vue.js, and Nuxt.js, and is hosted on Amazon Web Services infrastructure. Security headers include HSTS, and the page incorporates reCAPTCHA, Google Tag Manager, and Google Analytics. Threat intelligence flags the domain as a generic phishing campaign. It appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal reports that 4 out of 95 scanned security vendors have flagged the domain, reinforcing the high‑risk assessment. The combination of a zero trust score, low vendor detection, and active blocking suggests a deliberate malicious operation. Defenders should add gwbi87x.life to network deny lists and monitor traffic to the associated IP address 91.215.43.30 for anomalous connections. Updating intrusion detection signatures to recognize the observed technology stack and the specific page title "GET‑X" can improve early detection. Continuous re‑evaluation of the domain’s status is advised, as changes in hosting or content could affect the threat profile.