gwbq99x[.]top

Analysis of the domain gwbq99x.top indicates that it was registered on February 21, 2026 and is presently taken offline. The domain attracted attention from multiple security services: VirusTotal recorded detections from three of its ninety‑three scanning vendors, suggesting that at least a subset of the scanning engines identified malicious content associated with the domain. Independent blocklist monitoring shows that PhishDestroy has already blocked the domain and that it appears on one additional security blocklist, reinforcing the perception of abuse. A trust‑rating service, Gridinsoft, assigned a score of zero out of one hundred, which is consistent with a reputation of extreme untrustworthiness.

No further public data such as page titles, brand impersonation details, SSL certificates, hosting IP addresses, or autonomous system information are available in the current intelligence set, leaving the precise phishing campaign characteristics undefined. The limited detection footprint—three vendor flags and a single blocklist entry—suggests that the domain may have been used in a short‑lived or low‑volume campaign, or that broader detection coverage has not yet been applied. Defenders should incorporate the domain into existing URL filtering and DNS sinkhole rules to ensure any resumed activity is intercepted.

Continuous monitoring of passive DNS feeds and threat‑intel platforms is advised to capture any re‑registration or resurrection attempts. Given the zero trust score and existing blocklist entries, the domain should be treated as high‑risk until further evidence confirms remediation. Organizations should also verify that any inbound email or web traffic that references gwbq99x.top is blocked, and should educate users about the potential for similar newly‑registered domains to appear in future phishing attempts.