gwfd14x[.]space

Analysis of gwfd14x.space indicates that the domain was registered on February 21, 2026 and currently resolves to the IPv4 address 91.215.43.30. The host IP is allocated to AS57724, DDOS-GUARD LTD, and is geolocated to the Russian Federation. The domain is associated with a generic phishing threat type and has been taken offline at the time of this assessment.

The site was scanned by VirusTotal on multiple occasions, receiving coverage from 93 antivirus and URL scanning vendors; none of the scanned samples triggered a detection, but the absence of a flag does not constitute evidence of benign intent. The domain appears on a single security blocklist, specifically PhishDestroy, which has listed it as malicious and therefore contributes to its reputation as a phishing vector. An SSL certificate identified as R10 is present, but no further details regarding the certificate issuer or validity period are available.

No public Safe Browsing, Open Threat Exchange, registrar reputation, HTTP response codes, trust score metrics, page title, or additional evidence links have been disclosed for this domain. Given the limited visibility, defenders should treat gwfd14x.space as a potential phishing host, enforce outbound DNS filtering to block resolution to 91.215.43.30, monitor for any resurgence of activity, and incorporate the domain into existing phishing detection rulesets. Continuous re‑evaluation is advised, as future observations may reveal additional indicators of compromise or changes in the domain’s operational status.