gwfy57x[.]life

Analysis of gwfy57x.life shows a high‑risk, active brand‑impersonation campaign targeting Kraken. The domain returns an HTTP 301 redirect and is protected by a DDoS‑Guard SSL certificate. Infrastructure data links the host to IP address 186.2.165.80, located in the United Arab Emirates and registered under ASN AS59692 (IQWeb FZ‑LLC). Registration was performed through URL Solutions, Inc., and the domain has a Gridinsoft trust score of 0 / 100, indicating no reputation. It is listed on one security blocklist and has been blocked by PhishDestroy. VirusTotal scans report two detections out of 95 scanners, confirming malicious activity. The page title, written in Russian, references a GetX casino mirror for the year 2025, but no further content analysis is available. The site is classified as a crypto‑scam and explicitly impersonates the Kraken brand. Defenders should add gwfy57x.life to URL filtering and firewall deny lists, monitor for related indicators of compromise, and consider investigating the hosting provider IQWeb for additional abusive domains. Because nameserver information is not disclosed and only limited VT detections exist, continued observation is advised to capture any evolving payloads or phishing pages that may be deployed behind the redirect.