gwdq49x[.]top

The domain gwdq49x.top is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand and is not linked to a known crypto drainer kit. As of the latest verification, gwdq49x.top has been taken offline, though it previously posed an elevated risk of phishing-related fraud.

Technical indicators confirm the malicious nature of gwdq49x.top. The domain was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Fortinet, and appears on 1 security blocklist (PhishDestroy). It was registered on April 21, 2025, through URL SOLUTIONS INC. and resolved to the IP address 91.215.43.30, hosted by DDOS-GUARD LTD in Russia. The SSL certificate was issued by ddos-guard, and the observed page title was 'GET-X'. Google Safe Browsing did not flag the domain at the time of assessment, though Gridinsoft assigned it a trust score of 0/100.

Users who interacted with gwdq49x.top should immediately change any exposed passwords, enable two-factor authentication (2FA) on critical accounts, and monitor for unauthorized transactions or identity fraud. If financial or crypto accounts were accessed, revoke any active token approvals and transfer funds to a new, secure wallet. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, to aid in mitigation efforts.