gwdj00x[.]top

This domain, gwdj00x.top, is identified as a generic phishing threat targeting users of the GET-X platform. Analysis indicates the site was designed to mimic legitimate GET-X services, likely to harvest user credentials, financial details, or other sensitive information. The fraudulent nature of the domain is evident from its deceptive page title and infrastructure, which closely resembles that of authentic platforms while lacking proper security validations. Infrastructure analysis reveals multiple red flags confirming its malicious intent. The domain was registered on April 21, 2025, through URL SOLUTIONS INC., an uncommon registrar for legitimate services. Security vendors have flagged gwdj00x.top, with 3 out of 95 engines on VirusTotal detecting it as malicious. Additionally, the domain appears on one security blocklist and resolves to the IP address 91.215.43.30, which has been associated with prior phishing campaigns. Technologies detected include Node.js, Vue.js, Nuxt.js, and cloud services such as Amazon Web Services and Amazon CloudFront, which are often exploited to host and distribute phishing content while evading detection. Users who visited gwdj00x.top should take immediate action to mitigate potential risks. First, disconnect the device from the network to prevent further data transmission. Run a full antivirus scan to detect and remove any malware or malicious scripts that may have been downloaded. Change passwords for any accounts accessed while the site was visited, prioritizing financial and email accounts. Enable multi-factor authentication where possible to add an extra layer of security. Monitor accounts for unauthorized transactions or suspicious activity, and report any anomalies to the relevant service providers. If personal or financial information was entered, consider contacting credit monitoring services to prevent identity theft.