gwck86x[.]life

This domain is flagged as an active generic phishing threat with a high risk level. Infrastructure analysis reveals registration on February 21 2026 through URL Solutions, Inc. with nameservers ns1.pananames.com, ns2.pananames.com, ns3.pananames.com and ns4.pananames.com. The domain resolves to IP address 91.215.43.30 located in RU under AS57724 DDOS-GUARD LTD and returns an HTTP status of 200. Its page title matches the domain name exactly while the SSL certificate is issued under ddos-guard. The site remains online as of the July 12 2026 report date and appears on one security blocklist.

Detection metrics show two out of 95 vendors on VirusTotal marking the domain while the Gridinsoft trust score stands at zero out of 100. These indicators align with the assigned generic phishing classification and confirm ongoing activity without reference to any specific brand or kit. The exact page content has not been analysed beyond the recorded title so the precise lure mechanism stays undetermined at this stage.

Several elements remain uncertain including the full scope of any campaign infrastructure or downstream redirection targets. The use of privacy-focused nameservers and a DDoS-protected hosting provider is consistent with patterns observed in other short-lived domains yet does not by itself prove malicious intent. No additional brand or scam-type data is present in the available intelligence.

Defenders should block the domain and its resolving IP at network and endpoint layers. Monitoring for similar registrations under the same nameserver set and registrar is recommended given the recent creation date and current active status. Regular review of blocklist updates from sources such as PhishDestroy will help maintain coverage as the threat evolves.