gwdk59x[.]space

Analysis of the domain gwdk59x.space indicates that it was registered on 21 February 2026 and is currently taken offline. The host resolves to the IPv4 address 91.215.43.30, which is advertised as belonging to AS57724, DDOS‑GUARD LTD, a Russian‑based network operator. The domain appears on a single security blocklist, specifically PhishDestroy, which flags it as malicious.

VirusTotal records show that 93 independent scanning engines have examined the domain, none of which reported a detection; this lack of detections is noted without implying that the domain is safe. The SSL certificate associated with the domain is rated R10, suggesting a low trust score, though the certificate details themselves have not been disclosed. No additional intelligence such as Safe Browsing status, Open Threat Exchange indicators, registrar information, page title, or brand targeting is available in the current data set.

Given the limited evidence, the primary indicators of risk are the blocklist entry, the association with a known threat‑hosting ASN, and the recent creation date. Defenders should consider adding the domain to local deny lists, monitor DNS queries for the associated IP, and continue to watch for any re‑appearance on blocklists or new detections from scanning services. Until further activity is observed, the domain remains classified as a potential phishing threat pending additional investigation.