gwdm43x[.]top

This advisory concerns gwdm43x.top, which has been identified as an elevated risk due to brand impersonation of Kraken. The domain was specifically crafted to deceive visitors by mimicking legitimate brand assets and potentially harvesting credentials or sensitive data. The impersonation represents a significant threat to users seeking Kraken's services, as visitors may unknowingly provide personal or financial information to malicious actors.

Technical analysis reveals several clear indicators of malicious intent. The domain gwdm43x.top is referenced on one industry blocklist and is actively blocked by a well-known threat feed. VirusTotal reports 4 out of 95 security vendors flag this domain for malicious activity. Its registrar is URL SOLUTIONS INC., and domain creation records confirm it was registered very recently on April 21, 2025. The site also displays a page title in Cyrillic, inconsistent with the legitimate brand it mimics, further suggesting fraudulent purposes. The infrastructure, resolving to IP 91.215.43.30, aligns with known patterns of hosting for brand impersonation schemes.

Users who may have visited or interacted with gwdm43x.top are strongly urged to take immediate precautions. They should change any credentials entered on the site, enable multifactor authentication where possible, and scan their systems for malware. Any financial or personal information disclosed should be considered compromised, and affected individuals should monitor accounts for suspicious activity. Awareness and prompt action are essential to mitigate potential damages from this impersonation threat.