gwbv84x[.]space

The domain gwbv84x.space is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency exchange Kraken. This scam operates as a cryptocurrency phishing page, designed to deceive users into disclosing login credentials or transferring digital assets under false pretenses. As of the latest verification, gwbv84x.space has been taken offline, though prior activity indicates an elevated risk to users who may have interacted with it.

Technical analysis reveals gwbv84x.space was flagged by 1 of 95 VirusTotal security vendors, including Fortinet and Gridinsoft, which assigned a trust score of 0/100. The domain appears on 1 security blocklist, specifically PhishDestroy, and was not flagged by Google Safe Browsing. Registered on February 21, 2026, gwbv84x.space resolved to the IP address 91.215.43.30, hosted by AS57724 (DDOS-GUARD LTD) in Russia. The SSL certificate was issued by R11, and the site returned an HTTP 530 status at the time of assessment. No registrar information was available, and no page title was observed during scans.

Users who accessed gwbv84x.space should immediately change their Kraken account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. If cryptocurrency transactions were attempted, revoke any token approvals associated with the wallet and transfer remaining funds to a new, secure wallet. Report the domain to Kraken’s security team and submit it to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts. Monitor account activity for signs of fraud or unauthorized transactions.