gwdf21x[.]life

PhishDestroy identifies gwdf21x.life as a brand impersonation phishing domain specifically targeting Kraken, a well-known cryptocurrency exchange. The site was designed to deceive users into believing they were accessing legitimate Kraken services, likely to harvest login credentials or personal information. The page title was "Get x casino рабочее зеркало - Гет Икс официальный сайт - игровые автоматы онлайн," which indicates the domain may have been repurposed for casino-related scams, but the primary threat remains the impersonation of Kraken. The domain is currently offline, but its past activity posed significant risk to users.

Evidence from security scans reveals that VirusTotal flagged gwdf21x.life with 2 out of 95 security vendors detecting it as malicious, and it appears on at least one security blocklist. The domain was registered through URL Solutions, Inc. and resolved to IP address 91.215.43.30. Its SSL certificate was issued by ddos-guard, a service often used by malicious sites to obfuscate their origin. These indicators, combined with the targeted brand impersonation, confirm the domain was part of an active phishing campaign. The domain's registration details and hosting infrastructure suggest a deliberate effort to evade detection while targeting Kraken users.

Users who visited gwdf21x.life should immediately change their Kraken account passwords and enable two-factor authentication if not already active. They should monitor their accounts for any unauthorized transactions and consider running a security scan on their devices. PhishDestroy recommends reporting any suspicious activity to Kraken's support team and avoiding interaction with domains that exhibit similar characteristics. Always verify URLs directly through official channels before entering sensitive information.