gwbe49x[.]top

PhishDestroy has identified gwbe49x.top as a confirmed phishing domain engaged in brand impersonation of Ethereum, a leading cryptocurrency platform. The site, titled 'Гет икс 💫 Регистрация и вход – официальный сайт,' mimics the official Ethereum interface to trick users into entering their login credentials, which are then harvested by attackers. This type of threat, known as a crypto drainer or fake login page, poses a direct risk to users' digital assets and personal information.

Technical indicators underscore the malicious nature of gwbe49x.top. VirusTotal reports that 4 out of 95 security vendors flag this domain as malicious. The domain was registered on February 21, 2026, through URL Solutions Inc., and its SSL certificate is classified as R11, indicating a low level of trust. The domain appears on one security blocklist and was created with a suspiciously recent registration date, typical of phishing campaigns. The site is currently offline, suggesting that it has been taken down in response to reports.

As of now, gwbe49x.top is offline, likely due to intervention by hosting providers or law enforcement following reports from security researchers and users. However, the risk remains that similar domains may reappear under different names. PhishDestroy advises users to always verify the authenticity of any site claiming to be Ethereum by using official channels and bookmarking the correct URL. If you have interacted with gwbe49x.top, change your passwords immediately and monitor your accounts for unauthorized activity. Report any suspicious domains to PhishDestroy for further analysis and takedown.