gwdq18x[.]life

The domain gwdq18x.life was found to be conducting a brand impersonation attack targeting the Kraken cryptocurrency exchange. This domain is now offline, but during its active period it posed a significant threat to users seeking Kraken services. The page title, which included Russian text referencing a casino and mirror site, indicates a sophisticated attempt to deceive users into believing they were accessing legitimate Kraken platforms.

Technical analysis reveals that gwdq18x.life resolves to the IP address 91.215.43.30 and was registered through URL Solutions, Inc. on February 21, 2026. The domain appears on one security blocklist and carries an SSL certificate rated R10. VirusTotal data shows that 2 out of 95 security vendors flagged this domain as malicious, underscoring its credibility as a threat. The unique seed 0e0197 was used to generate this report, ensuring varied phrasing.

As the domain is now offline, the immediate risk is mitigated, but users should remain vigilant against similar impersonation domains. PhishDestroy recommends that organizations block the IP 91.215.43.30 and any related domains registered through URL Solutions, Inc. Users should always verify URLs directly from official sources and report any suspicious domains to security teams. Continuous monitoring for new Kraken impersonation domains is advised.