gweb46x[.]life

This domain, gweb46x.life, presents a high-risk brand impersonation threat specifically targeting users of the Kraken cryptocurrency exchange. Analysis indicates the site operated as a crypto drainer, designed to trick visitors into connecting wallets or entering credentials, which would then be used to siphon digital assets without authorization. The page title 'GET-X' and the use of reCAPTCHA suggest an attempt to mimic legitimate exchange verification processes, increasing the likelihood of successful deception. Evidence supporting this assessment includes detection by 10 out of 95 security vendors on VirusTotal, with the domain appearing on at least one security blocklist. Infrastructure analysis reveals the domain was registered through URL Solutions, Inc., and resolved to the IP address 186.2.165.80. The site employed a Let's Encrypt SSL certificate and utilized multiple technologies, including Node.js, Vue.js, Nuxt.js, Nginx, and Amazon Web Services, which are consistent with modern phishing infrastructure. The Gridinsoft trust score of 0/100 further corroborates the malicious nature of this domain. Users who visited gweb46x.life or interacted with its content should take immediate action to mitigate potential risks. First, revoke any wallet connections or permissions granted to the site through browser-based wallet extensions. Next, scan local devices for malware using updated security tools, as phishing sites may deploy additional payloads. Monitor Kraken accounts and linked wallets for unauthorized transactions, and consider transferring assets to a new wallet if credentials were entered. Report the incident to the impersonated brand’s security team for further investigation and potential takedown coordination.