gwdy63x[.]space

Analysis of the domain gwdy63x.space shows a clear malicious profile despite its current offline status. The domain was registered on February 21, 2026 and immediately resolved to the IP address 186.2.165.80, which is geo‑located in the United Arab Emirates and belongs to AS59692 (IQWeb FZ‑LLC). The hosting infrastructure is therefore tied to a known hosting provider associated with other illicit activity. An SSL certificate was observed with an R10 rating, indicating a weak or untrusted encryption setup.

Gridinsoft assigned a trust score of 0 out of 100, effectively flagging the domain as fully untrusted. VirusTotal scans reveal that three of ninety‑three security vendors flagged the domain, providing independent confirmation of its malicious nature. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy threat‑intelligence feed, reinforcing its classification as a phishing resource.

No public page title or detailed content snapshot is available, so the exact lure used by the site cannot be described; however, the evidence base is sufficient to label the domain as a generic phishing instrument. Defenders should add gwdy63x.space to URL filtering rules, block the associated IP 186.2.165.80 at perimeter devices, and monitor the ASN for any re‑registration attempts. Continuous re‑scanning is advised in case the site is brought back online, and any observed traffic should be logged for threat‑intel correlation.