access-krakeen-us-dekstop[.]pineapple[.]page

This domain, access-krakeen-us-dekstop.pineapple.page, is identified as a high-risk brand impersonation phishing site targeting Kraken, a cryptocurrency exchange platform. The page title, 'Log In | kraken®: | Sign In,' mimics the legitimate Kraken login interface, aiming to deceive users into entering sensitive credentials, such as usernames, passwords, and potentially two-factor authentication codes. The domain exhibits characteristics consistent with credential harvesting operations, a common tactic in cryptocurrency-related phishing campaigns. Analysis indicates the domain was registered on September 21, 2022, through Squarespace Domains II LLC. It resolves to the IP address 216.150.1.1, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). VirusTotal detection rates show 17 out of 95 security vendors flagging the domain as malicious. Google Safe Browsing classifies it as a phishing threat, and it appears on three security blocklists. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious domains due to its accessibility and automation. As of the latest assessment, the domain has been taken offline, reducing immediate risk to end users. However, the infrastructure remains a potential vector for future malicious activity. Users who accessed the domain prior to its takedown should assume credential compromise and take immediate remediation steps, including password resets and account monitoring. Organizations are advised to block the domain and associated IP address in network security controls to prevent accidental exposure. Continuous monitoring of related infrastructure is recommended due to the transient nature of such threats.