kraken-formular[.]xyz

This domain, kraken-formular.xyz, has been identified as a high-risk crypto scam impersonating the cryptocurrency exchange Kraken. Registered through NameSilo, LLC on December 20, 2025, the domain has since been taken offline. Analysis indicates that the site was flagged by Google Safe Browsing for social engineering, which often involves deceptive practices to trick users into divulging sensitive information or performing actions that could compromise their security. Despite the domain being currently offline, it remains important for defenders to be aware of its existence and past malicious activities.

The domain was added to the PhishDestroy blocklist, and one security blocklist has also documented its presence. At the time of its last known active state, the domain resolved to the IP address 78.142.229.16, which is located in the Netherlands and is part of the AS3214 xTom GmbH network. The lack of an SSL certificate is a red flag, as legitimate financial sites typically use SSL to secure user data. Out of 93 security vendors on VirusTotal, 16 flagged this domain, indicating a significant level of suspicion.

The Gridinsoft trust score for this domain is 0/100, reflecting its highly untrustworthy nature. The page title 'Verification' suggests that the site might have attempted to trick users into verifying their accounts, which is a common tactic in brand impersonation scams. Defenders should ensure that their systems are updated to block this domain and educate users about the risks of visiting unverified sites, especially those claiming to be related to Kraken or other financial institutions. Even though the domain is offline, it may be reactivated, and monitoring for related activities is advised.