kraken732[.]net

Analysis of the domain kraken732.net indicates active cryptocurrency phishing infrastructure targeting users of the Kraken exchange. The domain was registered on February 21, 2026, through NETIM SAS and currently resolves to the IP address 78.40.8.135, hosted on AS50474 (O2SWITCH SAS) in France. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The page title 'Index of /' suggests an exposed directory listing, which may indicate either misconfigured server settings or an attempt to host malicious files for distribution. Infrastructure review shows the domain is flagged by one security blocklist and has been classified as a cryptocurrency scam by PhishDestroy. VirusTotal reports that 4 out of 93 security vendors detect the domain as malicious, though this does not confirm universal consensus. The domain's trust score from Gridinsoft is 0/100, reinforcing its high-risk classification. Nameservers (ns1.netim.net, ns2.netim.net, ns3.netim.net) are consistent with the registrar, providing no additional anomalous indicators. No evidence of a phishing kit or specific attack vector is available from the current data. The exact content of the site remains unanalyzed, and no confirmation exists regarding whether it hosts credential harvesting forms, fake login portals, or other malicious assets. Defenders should treat this domain as high-risk due to its confirmed impersonation of Kraken, recent registration, and active blocklist presence. Network-level blocking is recommended, along with monitoring for connections to the IP address 78.40.8.135. Further investigation into hosted files or scripts is advised if the domain is encountered in logs or user reports.