gwft11x[.]space

The domain gwft11x.space is a phishing site engaged in brand impersonation targeting users of the cryptocurrency exchange Kraken. It operated as a cryptocurrency scam, attempting to deceive victims into disclosing login credentials or sensitive information under the guise of the legitimate Kraken platform. No drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate risk to users.

Technical indicators confirm gwft11x.space as malicious. VirusTotal reports 1 of 95 security vendors flagged the domain, including Fortinet and Gridinsoft, which assigned a trust score of 0 out of 100. The domain appears on 1 security blocklist, specifically PhishDestroy. It was created on February 21, 2026, and its SSL certificate was issued by R10. No registrar or IP address data is available. The observed HTTP status was 530, and no page title was detected during analysis.

Users who interacted with gwft11x.space should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or login attempts. Report the phishing domain to Kraken’s security team via their official support channels and submit the URL to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial loss occurred, contact law enforcement and provide all relevant details.