gwex89x[.]life

The domain gwex89x.life was a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It posed an elevated risk by attempting to deceive users into believing they were accessing a legitimate Kraken platform, though no drainer kit was identified. The site is currently taken offline, but its prior activity classified it as a cryptocurrency-related scam.

Technical indicators confirm gwex89x.life was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and Gridinsoft, which assigned it a trust score of 0/100. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through URL Solutions, Inc. It resolved to the IP address 91.215.43.30, hosted by AS57724 DDOS-GUARD LTD in Russia, with an SSL certificate issued by ddos-guard. The observed page title, 'Гет Икс casino 2025 - официальный сайт играть онлайн - актуальное зеркало для Get X,' suggested an attempt to mimic a gambling or crypto service rather than Kraken directly, though the impersonation intent remained clear.

Users who interacted with gwex89x.life should assume their credentials or wallet details may have been compromised. For cryptocurrency-related exposure, revoke any token approvals linked to the site and transfer funds to a new wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts. If financial loss occurred, file a report with local cybercrime authorities or organizations like the FBI’s IC3.