gwbw15x[.]top

The domain gwbw15x.top is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange Kraken. It operated as a cryptocurrency scam, attempting to deceive users into disclosing login credentials or transferring funds under the pretense of being the legitimate Kraken platform. No drainer kit was identified in this campaign. As of the latest verification, gwbw15x.top has been taken offline, though prior activity remains a risk for users who may have interacted with it.

Technical indicators for gwbw15x.top show limited but notable detection. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Fortinet, Gridinsoft, and Trustwave, with a Gridinsoft trust score of 0 out of 100. It appeared on 1 security blocklist, specifically PhishDestroy. The domain was created on February 21, 2026, and no registrar or IP address information is available. The SSL certificate was issued by R10, and the observed HTTP status was 530. Google Safe Browsing did not flag the domain at the time of analysis.

Users who may have interacted with gwbw15x.top should take immediate safety steps. If login credentials were entered, change passwords on the legitimate Kraken platform and enable two-factor authentication. Monitor accounts for unauthorized transactions or suspicious activity. For cryptocurrency-related exposure, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the phishing domain to Kraken’s security team and submit it to platforms like PhishTank or Google Safe Browsing to aid in broader threat mitigation.