gwcc72x[.]top

The domain gwcc72x.top has been identified as a brand impersonation threat specifically targeting the cryptocurrency exchange Kraken. Security analysis reveals the page title 'Get-x официальный сайт', which mimics Kraken's legitimate interface to deceive users into entering sensitive information. While no specific drainer kit has been confirmed, the site's design strongly suggests an attempt to harvest login credentials and potentially steal crypto assets.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports 2 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. The domain was created on April 21, 2025, and was registered through URL SOLUTIONS INC. It resolves to IP address 91.215.43.30 and uses an SSL certificate issued by ddos-guard, a common choice among phishing operators to evade detection. Google Safe Browsing status is not currently flagged, but the domain has been taken offline following PhishDestroy's analysis.

As of now, the domain is offline and no longer resolving. Response actions include reporting to hosting providers and security vendors to ensure continued blocking. However, users who may have visited the site before takedown remain at risk of compromised credentials or assets. PhishDestroy strongly advises anyone who interacted with gwcc72x.top to change their Kraken passwords immediately and enable two-factor authentication. Always verify URLs directly on Kraken's official website before logging in.