gwes58x[.]life

The domain gwes58x.life is a confirmed phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. This scam site was designed to deceive users into believing they were interacting with the legitimate Kraken platform, likely to harvest login credentials or facilitate fraudulent transactions. No cryptocurrency drainer kit was detected. As of the latest verification, gwes58x.life has been taken offline.

Technical indicators confirm the malicious nature of gwes58x.life. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet, while appearing on 1 security blocklist (PhishDestroy). It was registered through URL Solutions, Inc., though the creation date is not available. The site resolved to the IP address 186.2.165.80, hosted under AS59692 (IQWeb FZ-LLC) in the United Arab Emirates, and used an SSL certificate issued by Let's Encrypt (R12). Detected technologies included Node.js, Vue.js, Nuxt.js, Amazon Web Services, and DDoS-Guard. The observed page title was 'GET-X', and Gridinsoft assigned it a trust score of 0/100.

Users who interacted with gwes58x.life should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions and report any suspicious behavior to Kraken's support team. Additionally, victims should report the phishing domain to their local cybercrime unit or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.