gwey25x[.]space

The domain gwey25x.space is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange Kraken. It presents itself as a mirror or official access point for Kraken under the guise of providing a Russian-language portal ('Гет Икс зеркало - Доступ к официальному сайту'), aiming to deceive users into disclosing login credentials or sensitive information. No cryptocurrency drainer kit was identified, but the site is classified as a cryptocurrency scam. As of the latest verification, gwey25x.space has been taken offline.

Technical indicators for gwey25x.space reveal limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned a trust score of 0 out of 100. It appears on one security blocklist, specifically PhishDestroy. The domain was registered on February 21, 2026, though the registrar details are not available. The SSL certificate is issued by R11, and no associated IP address was recorded. Google Safe Browsing has not flagged the domain.

Users who may have interacted with gwey25x.space should immediately change their Kraken account passwords and enable two-factor authentication if not already active. Monitor account activity for unauthorized transactions or login attempts. Report the phishing domain to Kraken’s official security team and consider submitting it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If cryptocurrency was involved, review wallet activity for unusual transactions, though no drainer kit was detected in this case.