gwfo74x[.]life

gwfo74x.life is a newly registered domain (creation 21 Feb 2026) hosted by URL Solutions, Inc. The site presents a page titled “GET‑X” and returns HTTP 200 over a Let’s Encrypt R12 certificate. Its authoritative name servers are ns1‑ns4.pananames.com, indicating use of a commercial DNS provider. The domain is currently active and classified as high‑risk generic phishing.

Technical resolution points to IP 91.215.43.30, which geolocates to Russia and is announced by AS57724 (DDOS‑GUARD LTD). Traffic is delivered through Amazon CloudFront and the underlying host runs Node.js with Vue.js and Nuxt.js frameworks on Amazon Web Services, with HSTS enforced. The presence of DDoS‑Guard and CloudFront suggests attempts to obscure origin and provide resilience.

Reputation data shows a Gridinsoft trust score of 0 / 100 and the domain appears on one security blocklist. VirusTotal records two detections out of ninety‑five scanners, and PhishDestroy lists the site as blocked. These indicators, combined with the high‑risk rating, support the conclusion that the infrastructure is being used for credential‑harvesting or malicious redirects typical of generic phishing campaigns.

Defenders should immediately block gwfo74x.life at network perimeter and DNS filtering layers, and consider sinkholing the associated IP range. Continuous monitoring of the name servers and any newly observed sub‑domains is advised, as the operators may expand the campaign. Because the exact payload and targeted brands are not observable from the current page, further forensic capture of traffic to the site is recommended to confirm the malicious behavior.