support-kraken-cdn[.]created[.]app

This domain, support-kraken-cdn.created.app, was identified as a high-risk brand impersonation site targeting Kraken, a cryptocurrency exchange. Registered on July 12, 2023, through Tucows Domains Inc., the domain resolved to IP 216.150.1.1, hosted on Amazon.com, Inc. (AS16509) infrastructure in the US. The page title, 'Log In | Kraken®,' directly mimics the official Kraken login portal, aligning with the reported scam type of crypto fraud. At the time of assessment (July 23, 2026), the domain returned an HTTP 404 status, indicating it is no longer actively serving content.

It was blocked by PhishDestroy and flagged by Google Safe Browsing for social engineering. Security vendor analysis on VirusTotal showed 13 of 95 engines detecting malicious activity, though the specific nature of the payload or redirection remains unconfirmed. The domain appears on one security blocklist and uses nameservers ns1.vercel-dns.com and ns2.vercel-dns.com, with Vercel and HSTS technologies detected. SSL certification was issued by Let's Encrypt (R13).

Defenders should treat this domain as compromised infrastructure. While currently offline, historical DNS records and SSL certificates should be reviewed for residual connections. Network blocks at the IP (216.150.1.1) and nameserver level may prevent future reuse. No evidence of additional payloads or lateral movement is present in the available data, but monitoring for re-emergence under similar subdomains (e.g., 'support-kraken-*') is recommended.