gwbg97x[.]life

The domain gwbg97x.life is a verified brand impersonation phishing site targeting the Kraken cryptocurrency exchange. It poses a specific threat by attempting to steal login credentials and potentially cryptocurrency assets from users who believe they are interacting with a legitimate Kraken platform. The site is currently taken offline, but it was active as a phishing scam, not a drainer kit, and was designed to deceive users into entering sensitive information.

Technical indicators confirm the phishing nature of gwbg97x.life. VirusTotal flagged it with 2 of 95 vendors, including Fortinet and Gridinsoft, and it appears on 1 security blocklist, PhishDestroy. The domain was registered through URL Solutions, Inc. on February 21, 2026, and resolves to IP address 91.215.43.30, which is located in Russia under Ddos-guard LTD. The SSL certificate was issued by R11, and the observed page title was 'GET-X'. Google Safe Browsing did not flag the domain, but the Gridinsoft trust score is 0/100, indicating high risk.

To protect against this phishing scam, users who may have interacted with gwbg97x.life should immediately revoke any token approvals associated with their cryptocurrency wallets and move funds to a new, secure wallet. Additionally, change passwords for any accounts where credentials may have been entered, enable two-factor authentication (2FA) on all relevant accounts, and monitor for unauthorized transactions or fraud. Report the domain to security blocklists like PhishDestroy and to the impersonated brand, Kraken, for further action.