gwau52x[.]life

Analysis of gwau52x.life shows a domain that was registered on February 21, 2026 through URL Solutions, Inc. and is currently taken offline. The authoritative name servers are ns1.pananames.com, ns2.pananames.com, ns3.pananames.com, and ns4.pananames.com, indicating the use of the Pananames DNS service. Infrastructure fingerprints reveal a stack built on Node.js with Vue.js and Nuxt.js, hosted on Amazon Web Services and protected by HSTS, Google Tag Manager, Google Analytics, and DDoS-Guard. The SSL certificate is identified as R10, and the Gridinsoft trust score registers a rating of 0 out of 100, reflecting a lack of confidence in the site’s legitimacy.

VirusTotal records indicate the domain was scanned by 95 vendors, none of which raised a detection at the time of scanning; this absence does not constitute evidence of safety. The domain appears on a single security blocklist and is specifically listed by PhishDestroy, confirming its classification as a phishing resource. The page title returned by the site is "GET-X," but no further content analysis is available.

While the technical profile and blocklist inclusion strongly suggest malicious intent, the offline status limits immediate observation of payload or credential‑harvesting mechanisms. Defenders should continue to block the domain at network perimeters, monitor DNS queries to the listed Pananames servers, and enforce URL filtering policies that reference the known blocklist entry. Ongoing vigilance is advised, particularly for any future re‑activation of the domain or related subdomains that may reuse the same infrastructure components.