gwdz82x[.]life

This domain, gwdz82x.life, is currently flagged as a high-risk cryptocurrency scam targeting users of the Kraken exchange. Infrastructure analysis reveals the domain resolves to the IP address 91.215.43.30, which is hosted on AS57724, an autonomous system associated with a known bulletproof hosting provider based in Russia. The SSL certificate is issued by a service commonly used to obscure malicious infrastructure, further indicating deliberate efforts to evade detection. The domain has been blocked by at least one security vendor and appears on a security blocklist, reinforcing its classification as an active threat. The page title, GET-X, does not directly reference Kraken but aligns with the known scam type of cryptocurrency fraud. While the exact content of the site has not been analyzed, the domain is explicitly identified as impersonating Kraken, a major cryptocurrency exchange. This suggests the site likely presents itself as a legitimate trading platform or account management portal to deceive users into submitting credentials or transferring funds. The HTTP status code of 200 confirms the site is currently accessible, and the domain remains active as of July 12, 2026. Defenders should treat this domain as a confirmed malicious entity. The IP address and associated infrastructure have been linked to previous fraudulent activity, and the use of a hosting provider known for shielding malicious actors adds to the risk profile. Network-level blocking of the IP 91.215.43.30 and domain gwdz82x.life is recommended to prevent user exposure. Security teams should also monitor for related domains registered through the same registrar, URL Solutions, Inc., as this may indicate a broader campaign. While two out of ninety-five security vendors on VirusTotal have flagged the domain, this limited detection does not diminish the threat, as the domain’s infrastructure and known associations provide sufficient evidence of malicious intent.