gwbz75x[.]top

Analysis of gwbz75x.top shows the domain was registered on 21 February 2026 and is presently taken offline. The sole observed indicator is the page title “Get X войти можно через официальный сайт или актуальное зеркало”, which suggests the site was intended to present a login gateway for a service labeled “Get X”. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one external threat‑intelligence source has classified it as malicious.

VirusTotal records show the URL was submitted to 93 scanning engines; none of those vendors reported a detection at the time of the scan, but the absence of a detection does not constitute a safety guarantee. The TLS certificate associated with the site is identified as type R11, a certificate commonly observed in short‑lived phishing infrastructure. No additional metadata such as IP address, ASN, geographic location, or registrar information is available in the current intelligence set.

Consequently, the confidence in attributing the domain to a specific phishing campaign is limited to the observed title and blocklist inclusion. Defenders should continue to monitor the domain for any re‑activation, enforce blocking in local DNS or proxy filters, and consider adding the indicator to internal threat‑intel feeds. Future investigations should prioritize retrieving HTTP response headers, certificate details, and any redirection paths if the domain becomes reachable again, to refine attribution and support remediation.