gwdy52x[.]top

The domain gwdy52x.top was identified as a brand impersonation phishing site targeting Kraken users. Despite its offline status, the threat it posed was significant: it presented a fake Kraken-branded page designed to trick visitors into connecting their cryptocurrency wallets or entering sensitive credentials, ultimately leading to asset theft via a crypto drainer. The site's title, "Getx официальный сайт casino - зеркало вход - Гет Х бонусы игрокам," suggests it also masqueraded as a casino platform to lure victims.

Technical analysis reveals that the domain was registered through URL SOLUTIONS INC. on April 21, 2025, and resolved to IP address 91.215.43.30. Its SSL certificate was issued by DDoS-Guard, a provider often abused by malicious actors. VirusTotal flagged the domain with 2 out of 95 security vendors detecting it as malicious, and it appeared on one security blocklist. These indicators confirm the domain's malicious intent, even though it was taken offline shortly after discovery.

Users who may have visited gwdy52x.top should immediately disconnect any wallets that were connected to the site, revoke token approvals, and run a security scan on their devices. It is crucial to change passwords for any accounts that may have been compromised and enable two-factor authentication. Always verify the legitimacy of any site claiming to be a brand like Kraken by checking the official URL and using PhishDestroy's verification tools before interacting with any unfamiliar domains.