gwdt86x[.]space

Analysis as of July 22 2026 flags the domain gwdt86x.space as an active component of a Kraken‑focused crypto impersonation campaign. The domain was registered on February 21 2026 and is presently taken offline, consistent with the “offline” status reported by the monitoring platform. The site is listed on a single security blocklist and is actively blocked by PhishDestroy, indicating that at least one defensive feed has identified it as malicious. A Gridinsoft trust score of 0 out of 100 further confirms the low reputation of the host.

VirusTotal submissions show that one out of ninety‑five scanning engines flagged the domain, providing limited but concrete malware or phishing detection. The SSL certificate is labelled “R10”, which suggests a low‑grade or self‑signed certificate, a common characteristic of fraudulent infrastructure. The campaign is categorized as a crypto scam and explicitly impersonates the Kraken brand, targeting users who may be looking to trade or deposit cryptocurrency. No public information is available regarding the registrar, ASN, hosting IP address, or the exact page title displayed by the site, and no evidence links have been published.

Consequently, threat hunters should rely on the existing blocklist entries, the PhishDestroy block, and the Gridinsoft score to deny traffic to this domain. Adding gwdt86x.space to internal DNS blacklists, firewall deny lists, and endpoint web‑filtering rules will mitigate exposure. Continuous monitoring of new domains that share similar naming patterns or certificate attributes is recommended, as the operators may launch successor sites after takedown. Defenders are advised to educate users about unsolicited Kraken‑related communications and to verify URLs before entering credentials or cryptocurrency information.