manage-craken-io[.]pineapple[.]page

Analysis of the domain manage-craken-io.pineapple.page confirms its classification as a high-risk crypto phishing site targeting Kraken users. The domain, created on September 21, 2022, was actively serving content as of recent checks, returning an HTTP 200 status. Its page title, 'Kraken Login | Manage Your Crypto with Confidence,' directly impersonates the Kraken cryptocurrency exchange, aligning with the reported scam type of crypto fraud. The domain resolves to IP address 216.150.16.65, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. Security vendor detections are substantial: 16 of 95 engines on VirusTotal flagged the domain as malicious, and Google Safe Browsing explicitly marked it for social engineering.

The domain appears on at least one security blocklist, with PhishDestroy actively blocking it. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious nature. Infrastructure analysis reveals the use of Vercel nameservers (ns1.vercel-dns.com, ns2.vercel-dns.com) and technologies including React and HSTS. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites.

The domain was registered through Squarespace Domains II LLC, a registrar frequently used for both benign and fraudulent purposes. As of July 24, 2026, the domain has been taken offline, though defenders should remain vigilant for potential re-emergence under similar infrastructure or naming conventions. Organizations are advised to block the domain and its associated IP (216.150.16.65) at the perimeter, and to monitor for related indicators such as the use of Vercel hosting or Squarespace-registered domains impersonating financial services. No evidence of credential harvesting or wallet-draining scripts has been analysed, but the domain's intent aligns with typical crypto phishing campaigns.