center-craken-io[.]pineapple[.]page

The domain center-craken-io.pineapple.page has been identified as a high-risk phishing infrastructure specifically targeting Kraken, a cryptocurrency exchange platform. Analysis confirms this domain as a brand impersonation threat, designed to deceive users into submitting login credentials or sensitive financial information. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals the domain was registered on September 21, 2022, through Squarespace Domains II LLC. It resolved to the IP address 216.150.16.1, hosted on infrastructure associated with AS16509 (Amazon.com, Inc.) in the United States. The domain was flagged by 14 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. Google Safe Browsing classified it as phishing, and it appeared on at least one security blocklist. The SSL certificate was issued by Let’s Encrypt (R13), a common tactic to lend superficial legitimacy to fraudulent sites. The page title, 'Kraken Login | Trusted Crypto Platform for Traders,' closely mimics the legitimate Kraken platform to enhance deception. Current status confirms the domain is offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant for residual exposure, particularly if credentials were previously entered on this site. It is recommended to monitor for unauthorized access to Kraken accounts, rotate any potentially compromised credentials, and implement multi-factor authentication where available. Network defenders should update blocklists to include this domain and its associated IP address to prevent future access attempts. Historical logs should be reviewed for connections to 216.150.16.1 or related infrastructure to identify potential prior compromise.