gwei27x[.]top

Analysis of the domain gwei27x.top indicates that it was registered on February 21, 2026 and has since been identified as a phishing resource. The site was flagged by the PhishDestroy blocklist and is currently listed as offline, suggesting that the hosting service has taken the domain down or that the operators have ceased activity. VirusTotal reports that one out of ninety-three participating security vendors flagged the domain, providing a minimal but concrete indication of malicious behavior.

The domain appears on a single security blocklist, reinforcing the view that at least one reputable threat intelligence source has recorded its activity. No additional intelligence such as registrar details, IP address, ASN, geographic location, SSL certificate information, Safe Browsing status, or Open Threat Exchange (OTX) references is available in the supplied data, leaving those aspects of the infrastructure unverified. Consequently, the full scope of the hosting environment and any associated command‑and‑control infrastructure remain uncertain.

Defenders are advised to add gwei27x.top to local deny lists, monitor DNS queries for related hostnames, and enforce email filtering rules that block messages containing links to this domain. Continuous re‑evaluation is recommended in case the domain reappears or additional indicators emerge from broader threat feeds.