gwcz87x[.]life

Analysis of gwcz87x.life shows a high‑risk, active crypto‑scam infrastructure that impersonates the Kraken brand. The domain was registered on February 21, 2026 through URL Solutions, Inc. and is hosted on IP address 91.215.43.30, which resolves to a Russian Ddos‑guard LTD location. The domain uses four Pananames nameservers (ns1‑ns4.pananames.com) and presents an SSL certificate rated R10. Gridinsoft assigns a trust score of 0/100, indicating no perceived legitimacy. VirusTotal reports that 2 of 95 security vendors have flagged the domain, and it appears on a single security blocklist where PhishDestroy has already taken action to block it. The site returns an HTTP 301 redirect and the only observed page title is "GET‑X"; no further content has been publicly disclosed. The scam is classified as a crypto scam targeting Kraken users, suggesting potential attempts to harvest credentials or lure victims into fraudulent cryptocurrency transactions. Defenders should immediately block the domain and its resolved IP address at network perimeters, update endpoint and DNS filtering policies, and monitor for any outbound connections to the listed nameservers. Users should be warned that any unsolicited communications referencing Kraken that direct to gwcz87x.life are suspicious, and any credentials entered on that site should be considered compromised. Continuous intelligence gathering is recommended to track any future changes to the site’s content or additional infrastructure components.