gwcc77x[.]space

gwcc77x.space was registered on 2026-02-21 and currently resolves to an offline endpoint. The domain is associated with a crypto‑scam campaign that impersonates the cryptocurrency exchange Kraken. VirusTotal records indicate that 2 of 95 scanning engines flagged the domain as malicious, suggesting partial detection coverage. The TLS certificate presented by the site is identified as R13, a characteristic often observed in short‑lived fraudulent infrastructure.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a complete lack of reputation. PhishDestroy has already taken the domain offline and placed it on its blocklist, and the domain also appears on one additional security blocklist. The elevated risk rating aligns with the brand‑impersonation and crypto‑drain objectives described in the intelligence. Although the site is no longer reachable, defenders should continue to block the domain at network perimeter and DNS layers to prevent accidental re‑activation.

Monitoring of newly registered domains that share the “gwcc77x” pattern or that target Kraken users is recommended, as threat actors frequently recycle naming schemes. Incident response teams should treat any communication referencing this domain as malicious and correlate it with credential‑theft or funds‑transfer alerts. Further analysis should be conducted if the domain resurfaces, focusing on hosting IP, registrar details, and any changes in detection coverage.