learn-apps-krakeen[.]framer[.]ai

Analysis of learn-apps-krakeen.framer.ai indicates that the domain is currently offline, returning an HTTP 404 status with the page title "Site Not Found | Framer." The domain was registered on February 21, 2026 through CSC Corporate Domains, Inc. and resolves to the Amazon Web Services IP address 52.223.52.2, associated with ASN 16509 (Amazon.com, Inc.) in the United States. Technical fingerprinting shows the site was built on Framer Sites and React, with security headers HSTS enabled and support for HTTP/3. The SSL certificate is issued by Let's Encrypt (certificate identifier E8).

The domain is served by four AWS name servers: ns-1902.awsdns-45.co.uk, ns-635.awsdns-15.net, ns-1198.awsdns-21.org, and one additional entry truncated in the source data. Threat intelligence sources label the activity as generic phishing, and Google Safe Browsing flags the domain for social engineering. VirusTotal reports that 11 of 93 scanning engines have flagged the host, and the domain appears on a single security blocklist.

PhishDestroy has already blocked the domain. Given the combination of a recent registration, AWS hosting, active phishing detections, and the presence on blocklists, defenders should add the domain to URL filtering rules, enforce DNS sinkholing, and monitor the IP address for any future reuse. Continuous re‑evaluation is advised, as the current offline status may change if the operators reactivate the site.