gwaz09x[.]life

Analysis of the domain gwaz09x.life confirms its classification as an active phishing site targeting users of the Kraken cryptocurrency exchange. Registered through URL Solutions, Inc., the domain resolves to the IP address 91.215.43.30, hosted on AS57724 (DDOS-GUARD LTD) in Russia. The site returns an HTTP 200 status, indicating full operational capability as of July 12, 2026. The page title, displayed in Cyrillic and Latin script, advertises registration, mirror access, and casino bonuses under the name 'Getx,' suggesting an attempt to lure users with fraudulent gambling incentives linked to cryptocurrency transactions. Infrastructure analysis reveals the use of a DDoS-Guard SSL certificate, a common indicator in phishing campaigns due to its accessibility and anonymity features. The domain is flagged by at least one security blocklist and is identified as part of the 'Gambler Scam' phishing kit, which aligns with the cryptocurrency scam type noted in threat intelligence. Two of 95 security vendors on VirusTotal have detected malicious activity associated with this domain, though the limited detection rate does not diminish the confirmed risk. Defenders should prioritize blocking this domain and its associated IP address. The presence of casino-related lures and impersonation of a major cryptocurrency exchange indicates a high likelihood of financial fraud targeting users seeking quick gains or mirror access to restricted platforms. Further monitoring of domains registered through the same provider and resolving to similar infrastructure may reveal additional related threats. The exact content and functionality of the site remain unanalyzed, but the available indicators strongly support its classification as a high-risk phishing operation.