platform-krekeen[.]created[.]app

Analysis of platform-krekeen.created.app, observed on July 24 2026, shows that the domain was registered through Tucows Domains Inc. on July 12 2023 and resolves to IP 216.150.1.1, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The hosting environment uses Vercel DNS (ns1.vercel-dns.com, ns2.vercel-dns.com) and the site presented an HSTS header, indicating an attempt to enforce HTTPS. The TLS certificate was issued by Let’s Encrypt under the R13 profile, confirming that the domain was able to obtain a valid certificate despite its malicious purpose. When accessed, the HTTP response returned a 404 status code and the page title was "Log In | KraKen.com - Sign In to Account", which directly references the Kraken brand. The listed brand target is Kraken and the scam type is identified as a crypto scam, suggesting that the operator intended to harvest credentials or funds related to cryptocurrency accounts.

Reputation services have flagged the domain. Google Safe Browsing categorises it as a social‑engineering threat. VirusTotal recorded 13 detections out of 95 scanned vendors, confirming that multiple security products consider the host malicious. The domain appears on at least one public blocklist, specifically PhishDestroy, and its current status is reported as taken offline. No additional intelligence such as malware payloads or command‑and‑control infrastructure has been uncovered, leaving the exact trade‑craft of the actors unknown.

Defenders should block any outbound connections to 216.150.1.1 and add platform-krekeen.created.app to URL filtering policies. Email gateways should treat messages containing this domain as malicious, especially those purporting to request Kraken login credentials. Continuous monitoring of Vercel‑hosted domains for similar naming patterns is recommended, as the infrastructure can be rapidly regenerated.