gwez18x[.]top

This domain, gwez18x.top, is flagged for brand impersonation targeting Kraken, a cryptocurrency exchange platform. Analysis indicates the site presents itself as a casino login portal with Russian-language content, specifically titled 'Гет Икс (Get x)- официальный сайт вход - промокоды на пополнение в гет х casino.' The fraudulent page is designed to harvest user credentials and payment details under the guise of offering promotional codes for deposits, a common tactic in crypto-drainer phishing schemes. Infrastructure analysis reveals the domain was registered on April 21, 2025, through URL SOLUTIONS INC. and resolves to the IP address 91.215.43.30. Detection metrics show a VirusTotal score of 3/95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is assigned a Gridinsoft trust score of 0/100. Google Safe Browsing (GSB) status is not explicitly listed, but the domain has been blocked by PhishDestroy, indicating prior identification as a phishing threat. As of the latest assessment, gwez18x.top is offline, reducing immediate risk to end users. However, the domain remains registered and could be reactivated or repurposed for future campaigns. Organizations should monitor for DNS reactivation or changes in hosting infrastructure. Users are advised to verify domain authenticity before entering credentials, enable multi-factor authentication on all financial accounts, and report any suspicious login attempts to the legitimate platform’s security team. The elevated risk level is retained due to the domain’s recent creation and association with known phishing infrastructure.