gwcl89x[.]space

The domain gwcl89x.space is a phishing site that impersonates the cryptocurrency exchange Kraken, posing an elevated risk of brand impersonation scams. It was designed to deceive users into believing they are interacting with the legitimate Kraken platform, potentially leading to credential theft or financial loss. No drainer kit was identified, and the site is currently taken offline.

Technical indicators show gwcl89x.space was flagged by 1 of 95 VirusTotal security vendors, including Fortinet and Gridinsoft, which assigned it a trust score of 0/100. The domain appears on 1 security blocklist (PhishDestroy) and was created on February 21, 2026. The SSL certificate was issued by R11, and the site returned an HTTP 530 status when last observed. No registrar or IP address data is available.

Users who interacted with gwcl89.space should immediately change their Kraken account passwords, enable two-factor authentication, and monitor for unauthorized transactions. If cryptocurrency was involved, revoke any token approvals and consider moving funds to a new wallet. Report the phishing domain to Kraken’s security team and file complaints with platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities.