gwab92x[.]top

Analysis of gwab92x.top as of July 25, 2026 indicates that the domain is currently offline but retains several indicators of malicious use. The domain was registered on February 21, 2026 through URL Solutions Inc., a registrar frequently associated with short‑lived abusive domains. It resolves to four Pananames nameservers (ns1‑ns4.pananames.com.), a configuration commonly employed by actors who require rapid DNS changes. The site presented the page title “Гет икс (GET X) Официальный сайт казино – вход и регистрация”, suggesting a targeted phishing campaign aimed at Russian‑speaking casino users.

Gridinsoft assigned a trust score of 0 / 100, and the domain appears on one external security blocklist, confirming that at least one protective feed has flagged it. VirusTotal scans show that 2 of 93 antivirus or URL‑reputation engines flagged the domain, providing additional independent confirmation of suspicious activity. The SSL certificate is identified only as “R11”, indicating a low‑quality or self‑signed certificate that does not convey trust. PhishDestroy has already listed the domain as blocked, reinforcing the consensus that it was used for phishing.

No public IP, ASN, or country information is available in the current intelligence set, and the lack of a Safe Browsing or OTX record means that those sources cannot be referenced. Because the site is offline, real‑time payload analysis is not possible, but defenders should continue to monitor the domain’s DNS records for reactivation, add the host to internal blocklists, and treat any future resolution as malicious. Organizations that receive emails referencing “GET X” casino login pages should treat such messages as phishing attempts and instruct users to verify URLs before entering credentials. Ongoing vigilance is recommended, especially given the recent creation date and the presence of multiple security‑vendor detections.