gwfo26x[.]space

The domain gwfo26x.space has been identified as a source of generic phishing activity. There is no evidence that it impersonated any specific brand or used a known drainer kit. As of the latest assessment, gwfo26x.space is taken offline, reducing its immediate threat, but users who interacted with the site while it was active may still be at risk. This domain is not safe and should be considered a phishing scam.

Technical analysis shows that gwfo26x.space was registered through ripencc, although the creation date is not available. The domain resolves to IP address 91.215.43.30, located in Russia under AS57724 DDOS-GUARD LTD. VirusTotal reports that 1 of 95 security vendors, including Gridinsoft, flagged gwfo26x.space as malicious. The site appears on one security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0/100. Google Safe Browsing does not currently flag the site. There is no SSL certificate associated with this domain, and the observed page title was 'GET-X'. Only one nameserver was detected.

Users who visited gwfo26x.space should immediately change any passwords they may have entered on the site and enable two-factor authentication where possible. Monitor accounts for signs of unauthorized activity or fraud. If credentials were reused elsewhere, update those accounts as well. Incidents involving gwfo26x.space can be reported to relevant security authorities or anti-phishing organizations to help prevent further harm.