accessmetaiopage[.]pineapple[.]page

The domain accessmetaiopage.pineapple.page is a phishing site engaged in brand impersonation targeting Apple users. It presents itself as a legitimate Apple service page but is designed to deceive victims into providing sensitive information under the guise of tech support scams. No crypto drainer kit was identified in this campaign. The site is currently taken offline, though prior activity posed an elevated risk to users.

Technical analysis shows that accessmetaiopage.pineapple.page was flagged by 3 of 95 security vendors on VirusTotal, including ESET, SOCRadar, and Webroot. It appears on one security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Squarespace Domains II LLC on September 21, 2022, and resolves to the IP address 216.150.1.129, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (R13), and the nameservers are ns1.vercel-dns.com and ns2.vercel-dns.com. The observed HTTP status was 200, though no page title was recorded. Gridinsoft assigned a trust score of 0/100 to the domain.

Users who may have interacted with accessmetaiopage.pineapple.page should immediately change any passwords entered on the site, particularly for Apple ID or associated accounts. Enable two-factor authentication (2FA) where available to prevent unauthorized access. Monitor financial and account activity for signs of fraud, such as unauthorized transactions or login attempts. Report the phishing domain to Apple via their official reporting channels and submit it to platforms like PhishTank or Google Safe Browsing to aid in broader detection efforts.