gwbx44x[.]website
The domain gwbx44x.website is a confirmed phishing site engaged in brand impersonation targeting Amazon. It was designed to deceive users into entering login credentials or personal information by mimicking the appearance of the legitimate Amazon platform. No crypto drainer kit was detected in this campaign. The site is currently taken offline, reducing immediate risk to visitors.
Technical analysis shows gwbx44x.website was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. The domain appears on 1 security blocklist, specifically PhishDestroy. It was registered through URL Solutions Inc. on July 05, 2025, with no associated IP address available. The SSL certificate was issued by R11, and the domain uses a single nameserver. The observed HTTP status was 429, and no page title was recorded during analysis.
Users who may have interacted with gwbx44x.website should immediately change their Amazon passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized purchases or login attempts. Report the phishing domain to Amazon’s official abuse reporting channels and consider submitting it to platforms like Google Safe Browsing or the Anti-Phishing Working Group to aid in broader takedown efforts.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive