gwem15x[.]life

The domain gwem15x.life has been identified as a generic phishing site specifically designed to impersonate GetX Casino, a known online gambling platform. Analysis indicates the domain was actively used for phishing operations, presenting itself as an official mirror site to deceive users into disclosing login credentials, financial details, or depositing funds under false bonus offers. The threat type is classified as credential and financial fraud targeting Russian-speaking users, given the page title and content language. Infrastructure analysis reveals multiple high-risk indicators. The domain is flagged by 9 of 95 security vendors on VirusTotal, including detections for phishing and fraudulent content. It holds a Gridinsoft trust score of 0 out of 100, further confirming its malicious classification. The domain was registered through URL Solutions, Inc., and resolves to the IP address 186.2.165.80. It appears on at least one security blocklist, and its SSL certificate is issued by Let’s Encrypt, a common tool used by threat actors to lend superficial legitimacy to fraudulent sites. No legitimate association with GetX Casino or its authorized partners has been verified. As of the latest assessment, gwem15x.life has been taken offline, likely due to enforcement actions or hosting suspension. However, users who interacted with the domain prior to its takedown should consider any shared credentials or financial information compromised. It is recommended to monitor accounts for unauthorized activity, reset passwords using multi-factor authentication, and verify the authenticity of any communications claiming to be from GetX Casino. Organizations are advised to block the domain and its resolving IP at the network level to prevent potential re-emergence or related threats from the same infrastructure.