school-metamak-maetamas[.]pineapple[.]page

The domain school-metamak-maetamas.pineapple.page was registered on October 23, 2025 through Vercel Inc. and resolves to IP address 216.150.1.1, which is owned by Amazon.com, Inc. (AS16509) and geolocated to the United States. The site serves an HTTPS certificate from Let’s Encrypt (R13) and returns HTTP 200 responses. Technical fingerprints show Vercel hosting, a React front end, and enforced HSTS. The page title reported by crawlers is "MetaMask - Pineapple," indicating a direct brand impersonation of MetaMask, a cryptocurrency wallet. Google Safe Browsing flags the domain for social engineering, and VirusTotal records 16 of 95 scanners marking it as malicious. It is listed on one public blocklist and is actively blocked by PhishDestroy. The threat is classified as a crypto scam targeting MetaMask users. While the exact page content has not been examined, the combination of brand‑targeted title, malicious detections, and hosting on a legitimate cloud provider suggests a deliberate phishing infrastructure. Defenders should block the domain and its resolving IP at DNS and proxy layers, monitor for related Vercel or Amazon‑hosted subdomains, and instruct users to avoid any unsolicited MetaMask‑related links from this host. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to this infrastructure.