gwdv54x[.]life

This domain gwdv54x.life is currently active and classified as a high‑risk brand‑impersonation site targeting the Ethereum brand. Infrastructure analysis shows it resolves to IP 91.215.43.30, owned by AS57724 DDOS‑GUARD LTD and geolocated in Russia. The server presents a DDOS‑GUARD SSL certificate and issues an HTTP 301 redirect to an undisclosed location. Registration data indicate the domain was created through URL Solutions, Inc., and no public nameserver information is available. The page title observed in the crawl – “Getx рабочее зеркало 2025 – Гет Икс официальный сайт – регистрация в casino” – suggests the site is leveraging a gambling‑focused phishing kit known as Gambler Scam, consistent with the reported crypto‑scam classification. Threat intelligence records show the domain has been blocked by PhishDestroy, appears on one security blocklist, and received detections from 2 of 95 vendors on VirusTotal. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. While the exact content of the landing page has not been publicly released, the combination of brand impersonation, gambling kit, and crypto‑scam label indicates a likely attempt to harvest Ethereum‑related credentials or lure victims into fraudulent cryptocurrency transactions. Defenders should add gwdv54x.life and its resolved IP 91.215.43.30 to blocklists, monitor DNS queries for the domain, and update intrusion‑detection signatures to flag HTTP 301 responses originating from DDOS‑GUARD‑issued certificates. Continuous re‑evaluation is advised as additional intelligence becomes available.