gwbr97x[.]life

PhishDestroy has identified gwbr97x.life as an elevated-risk domain engaging in brand impersonation, specifically targeting the cryptocurrency exchange Kraken. The page title, 'Get X casino автоматы - зеркало официальный сайт - Гет Икс играть на деньги,' indicates the threat is not a direct login page but rather a casino-themed website designed to appear legitimate to lure unsuspecting users. While the domain is currently offline, its past activity posed a significant risk to anyone seeking to access Kraken services.

Technical analysis reveals several red flags: the domain is registered through URL Solutions, Inc. and resolves to IP address 91.215.43.30. VirusTotal flags it with 2 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. The SSL certificate is issued by ddos-guard, a provider often used by malicious sites to evade takedowns. Despite being taken offline, the domain's registration details and hosting infrastructure suggest it could be reactivated or used as a template for future attacks.

Users who may have interacted with this domain should immediately change their Kraken account passwords and enable two-factor authentication. PhishDestroy recommends always verifying the URL of any site claiming to be Kraken by checking the official domain directly. Avoid clicking links in unsolicited messages or search ads. If you suspect your credentials were compromised, contact Kraken support and monitor your account for unusual activity. Stay vigilant against similar impersonation attempts using variations of this domain pattern.