gwch80x[.]life

gwch80x.life was registered on February 21, 2026 through URL Solutions, Inc. The domain resolves to four pananames.com nameservers (ns1‑ns4.pananames.com) and serves content over HTTPS with an R10 certificate. Scans return HTTP 200 and a page title of “GET‑X”. Infrastructure analysis shows hosting on Amazon Web Services behind Amazon CloudFront, protected by DDoS‑Guard, and an application stack of Node.js, Vue.js and Nuxt.js. The domain appears on one security blocklist and is blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, and VirusTotal records two detections from ninety‑five vendors.

The current risk rating is high and the status is listed as active. The limited detection count suggests that the phishing infrastructure is either newly deployed or employing evasion techniques that reduce visibility across scanning platforms. No additional intelligence regarding targeted brands, payloads, or credential‑harvesting mechanisms has been published, and the site’s visual content has not been captured, leaving the exact user‑facing behavior uncertain. The presence of modern web frameworks and CDN services indicates a capability to deliver dynamic content and to obscure the origin of malicious traffic.

Defenders should prioritize the domain in blocklists and enforce network‑level filtering to prevent client connections. Continuous monitoring of the associated IP ranges within the AWS hosting environment is advised, as well as periodic re‑scanning on VirusTotal and similar services to capture any escalation in detection rates. Organizations that rely on the identified technology stack should verify outbound connections to the listed nameservers and consider applying stricter TLS inspection policies to mitigate potential credential capture.