gwdq57x[.]top

Analysis of the domain gwdq57x.top indicates it was actively involved in cryptocurrency-related phishing activity, classified as a crypto scam. The domain was registered on February 21, 2026, through URL Solutions Inc. and is associated with infrastructure hosted by DDOS-GUARD LTD (AS57724), resolving to the IP address 91.215.43.30, located in Russia. The domain's nameservers are provided by Pananames (ns1.pananames.com through ns4.pananames.com), a pattern observed in other phishing campaigns leveraging bulletproof hosting services. The page title captured from the site was 'GET-X,' though the exact content and mechanics of the scam remain unconfirmed due to the domain's current offline status.

The domain holds a Gridinsoft trust score of 0/100, reinforcing its high-risk classification. It appears on at least one security blocklist (PhishDestroy) and was flagged by 2 of 93 security vendors on VirusTotal, though the absence of additional context limits further assessment of its detection coverage. The SSL certificate is issued by DDOS-GUARD, a provider frequently utilized by malicious actors to obfuscate infrastructure. Defenders should treat this domain as part of a broader crypto scam operation, particularly given its hosting on a known bulletproof ASN.

While the domain is currently offline, historical resolution data and registration details suggest it may re-emerge under similar infrastructure. Network defenders are advised to block the domain and its associated IP (91.215.43.30) at the perimeter, while monitoring for related domains registered through the same registrar or utilizing identical nameserver configurations. Further investigation into the 'GET-X' page title may reveal connections to other active or dormant phishing campaigns targeting cryptocurrency users.