gwbz34x[.]top

The domain gwbz34x.top is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange Kraken. It poses an elevated risk by attempting to deceive users into believing they are interacting with the legitimate Kraken platform, potentially leading to unauthorized access to accounts or financial loss. No drainer kit was identified, but the site was actively used for cryptocurrency-related scams before being taken offline.

Technical indicators confirm gwbz34x.top was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet. The domain was registered through URL Solutions Inc. on February 21, 2026, and resolved to the IP address 186.2.165.80, hosted by Iqweb LLC in the United Arab Emirates. It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by R11. The observed page title was 'GET-X', and the domain utilized nameservers from Pananames. Google Safe Browsing did not flag the domain, though Gridinsoft assigned it a trust score of 0/100.

Users who interacted with gwbz34x.top should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If login credentials were entered, change passwords for the affected account and enable two-factor authentication (2FA) on all linked services. Monitor accounts for unauthorized transactions and report the incident to Kraken's official support channels. Additionally, victims can submit the domain to anti-phishing platforms such as PhishTank or Google Safe Browsing to aid in broader mitigation efforts.