gwbm86x[.]life

The domain gwbm86x.life is currently active and hosts a site that claims to be a Kraken service, as indicated by the page title “Гет Х официальный сайт играть - вход через зеркало 2025 с фриспинами и бонусами” and the explicit “Impersonates: Kraken” tag. VirusTotal has flagged the domain by two of ninety‑five scanned security vendors, and the site is listed on a single public blocklist. PhishDestroy also reports the domain as blocked. The SSL certificate is issued by Let’s Encrypt (R12), providing HTTPS with HSTS enabled, but the certificate does not mitigate the malicious intent. Infrastructure analysis shows the domain resolves to IP 186.2.165.80, which belongs to AS59692 IQWeb FZ‑LLC in the United Arab Emirates. The host is registered through URL Solutions, Inc., and the Gridinsoft trust score is 0 out of 100, indicating a lack of confidence in the host’s legitimacy. The web stack is built on Node.js and serves a Vue.js / Nuxt.js application; reCAPTCHA is present, likely to evade automated analysis, and traffic is protected by DDoS‑Guard. Google Tag Manager and Google Analytics are also loaded, suggesting the operator tracks visitor behavior. Defenders should treat gwbm86x.life as a high‑risk brand‑impersonation vector targeting Kraken users. Immediate actions include adding the domain and its resolving IP 186.2.165.80 to network deny lists, ensuring DNS filtering solutions block resolution, and extending existing web‑filter policies to cover the observed SSL certificate fingerprint. Continuous monitoring of the IP range associated with AS59692 is advised, as the same infrastructure may host additional fraudulent sites. Because the page content has not been publicly analysed, threat hunters should retrieve the page in a sandboxed environment to confirm any credential‑stealing or cryptocurrency‑related payloads.