gwaw74x[.]life

The domain gwaw74x.life is currently active and returns HTTP status code 200. It is classified as a generic_phishing threat and has been blocked by the PhishDestroy service. The page title presented by the site is "GET-X", which is the only observable content identifier available at this time.

Infrastructure analysis shows the domain resolves to IP address 186.2.165.69, which is registered to Iqweb LLC in the United Arab Emirates. The domain was created on February 21, 2026 and is registered through URL Solutions, Inc. DNS resolution is handled by four Pananames nameservers (ns1‑ns4.pananames.com). The host environment combines multiple cloud and web technologies: Node.js, Google Cloud, Amazon Web Services, Nginx, Vue.js, Nuxt.js, and HSTS enforcement, with reCAPTCHA present on the site. The SSL certificate is identified as "R11" and the Gridinsoft trust score is 0 out of 100, indicating a lack of trust from that vendor.

Detection data indicates the domain appears on a single security blocklist and has been flagged by two of ninety‑five VirusTotal scanners. The low number of detections suggests limited exposure in the scanning ecosystem, but the presence of a dedicated blocklist entry and the PhishDestroy block confirm malicious intent. No additional content analysis is available, so the specific phishing lure, credential collection method, or targeted brand cannot be confirmed at this stage.

Defenders should prioritize immediate containment of gwaw74x.life. Recommended actions include adding the domain to network and endpoint blocklists, monitoring DNS queries for the associated IP and nameservers, and employing sinkholing where feasible. Continuous re‑evaluation of VirusTotal and other threat intel sources is advised, as additional detections may surface. Given the cloud‑based stack and the zero trust score, any traffic to the domain should be treated as high‑risk until further forensic evidence clarifies the scope of the phishing campaign.