gwcs02x[.]life

On 24 July 2026 analysts observed the domain gwcs02x.life resolving to the IPv4 address 91.215.43.30, which is registered to AS57724 (DDOS‑GUARD LTD) in Russia. The domain was created on 21 February 2026 via the registrar URL Solutions, Inc. and is served with an SSL certificate issued to “ddos‑guard”. HTTP requests return a page with the title “GET‑X”, but no further content analysis is available. The site is classified as a crypto‑scam that impersonates the cryptocurrency exchange Kraken; the associated phishing kit is identified as “Gambler Scam”.

Reputation services have assigned a Gridinsoft trust score of 0 / 100, and VirusTotal reports that 2 of 93 scanning engines flagged the domain. It appears on a single security blocklist and has been blocked by the PhishDestroy service. The nameserver set includes ns1.pananames.com, ns2.pananames.com, ns3.pananames.com and a truncated ns4.pananames.com entry. No additional public indicators such as Safe Browsing or OTX entries were provided.

Because the domain is currently offline, active mitigation is limited to preventative measures: network defenses should deny any outbound or inbound connections to 91.215.43.30 and add gwcs02x.life to DNS and URL filtering blocks. Continuous monitoring of the associated IP range and the registered nameservers is advised, as the infrastructure may be reused for future impersonation campaigns targeting Kraken or other crypto platforms. Until further forensic evidence is obtained, the confidence in the domain’s malicious intent remains high due to the combination of brand impersonation, low trust score, detection flags, and the presence of a known gambling‑type phishing kit.