gwfr80x[.]life

The domain gwfr80x.life is a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. This scam operates as a cryptocurrency phishing page, attempting to deceive users into divulging login credentials or sensitive information under the guise of the legitimate Kraken platform. As of the latest verification, gwfr80x.life has been taken offline, though it previously posed an elevated risk to users.

Technical indicators confirm gwfr80x.life as a malicious domain. It was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, which assigned it a trust score of 0/100. The domain appears on one security blocklist, PhishDestroy, and was registered through URL Solutions, Inc. It resolved to the IP address 91.215.43.30, hosted by AS57724 (DDOS-GUARD LTD) in Russia, with an SSL certificate issued by ddos-guard. The observed page title, 'Get X официальный сайт онлайн - игровые автоматы - Гет Икс промокоды,' suggests a Russian-language focus, though the domain impersonates Kraken.

Users who may have interacted with gwfr80x.life should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or login attempts. Report the phishing domain to Kraken’s security team and consider submitting it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If cryptocurrency funds were exposed, review wallet approvals and revoke any suspicious token permissions to prevent further unauthorized access.