gwcn66x[.]life

The domain gwcn66x.life is currently active and has been classified as a high‑risk brand‑impersonation threat targeting the cryptocurrency exchange Kraken. Infrastructure analysis shows the domain resolves to IP address 91.215.43.30, which is allocated to AS57724 (DDOS‑GUARD LTD) in Russia. The TLS certificate presented is issued by DDoS‑Guard, and the site returns an HTTP 301 redirect, with the only visible page title reporting a "Privacy error." The domain was registered through URL Solutions, Inc., but no nameserver information is publicly available. Threat intelligence indicates that five of ninety‑five VirusTotal scanners have flagged the domain, and it is listed on a single security blocklist. Independent monitoring services have assigned a Gridinsoft trust score of 0 / 100 and have blocked the domain via PhishDestroy. The intelligence tags the activity as a crypto‑scam that impersonates Kraken, though the exact content of the landing page has not been examined. Defenders should treat the domain as malicious: block DNS resolution and HTTP/HTTPS traffic to 91.215.43.30, add the domain to internal blocklists, and monitor for any related command‑and‑control or credential‑harvesting activity. Continuous observation of the IP reputation and any future changes to the SSL certificate or hosting provider is recommended, as additional indicators may emerge.