gwdr11x[.]life

PhishDestroy identified gwdr11x.life as a malicious domain engaged in brand impersonation of Kraken, a legitimate cryptocurrency exchange. This domain poses a specific threat as a crypto drainer, designed to trick users into connecting their wallets or entering credentials, ultimately stealing digital assets. The page title "GET-X" further suggests an attempt to impersonate Kraken's services, luring victims with promises of access or rewards.

Evidence from security scans shows that gwdr11x.life was flagged by 2 out of 95 security vendors on VirusTotal, indicating a moderate but credible threat. The domain was registered through URL Solutions, Inc., and its SSL certificate was issued by Let's Encrypt (R13), which is commonly abused by malicious sites. It appears on 1 security blocklist and resolved to IP address 186.2.165.80. Fortunately, the site is currently offline, but its infrastructure could be reactivated.

If any user visited gwdr11x.life, they should immediately disconnect their cryptocurrency wallets from any sites or apps that may have shared connection data. It is also recommended to run a full security scan on their device, change passwords for any accounts that may have been compromised, and monitor for unauthorized transactions. PhishDestroy advises avoiding any interaction with this domain and reporting it to relevant authorities if encountered again.