gwdl05x[.]top

This domain is flagged for elevated-risk brand impersonation targeting Ethereum cryptocurrency users. Analysis indicates the site operates as a wallet drainer, designed to trick visitors into connecting wallets to malicious smart contracts that siphon funds. The page title, "Гет Икс - Официальный сайт казино | Регистрация | Рабочее зеркало 2025," misrepresents itself as an official casino portal, a tactic commonly used to obfuscate its true purpose of crypto asset theft. Infrastructure analysis reveals the domain gwdl05x.top was registered on April 18, 2025, through URL SOLUTIONS INC. and resolves to the IP address 91.215.43.30. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently offline, though historical activity suggests prior use in active campaigns. The registrar and hosting infrastructure align with patterns observed in other crypto-drainer operations, including rapid domain churn and bulletproof hosting providers. Mitigation steps for organizations and end-users include blocking the domain and its resolving IP at the network perimeter. Cryptocurrency users should verify wallet connection prompts against official project domains and avoid interacting with unsolicited links, particularly those promoting giveaways or casino-themed incentives. Wallet software should be configured to require manual approval for all contract interactions, and users should monitor transaction histories for unauthorized activity. Security teams are advised to correlate this domain with other known Ethereum impersonation campaigns to identify broader infrastructure reuse.