web-craken-us[.]pineapple[.]page

The domain web-craken-us.pineapple.page is flagged for brand impersonation, specifically targeting the cryptocurrency exchange Kraken. The domain is currently offline, but it poses a high risk to users who may have encountered it before it was taken down. The page title 'Log In | kraken®:' suggests an attempt to mimic the official Kraken login page to deceive users into providing their credentials.

Infrastructure analysis reveals that the domain was registered through Squarespace Domains II LLC and resolves to the IP address 216.150.1.193, which is located in the United States and is part of the Amazon.com, Inc. network (AS16509). The domain was created on September 21, 2022, and is currently flagged by 16 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. Additionally, the domain appears on one security blocklist and has been flagged by Google Safe Browsing as a phishing site. The SSL certificate was issued by Let's Encrypt, which is a common choice for phishing sites due to its ease of use and credibility.

Given the current status of the domain as offline, the immediate risk is reduced. However, users who may have interacted with this domain before it was taken down are advised to monitor their Kraken accounts for any unusual activity. Security teams should ensure that this domain remains blocked in their network defenses and consider educating users about the risks of brand impersonation and phishing attacks. Regular updates to security policies and user awareness training can help prevent similar incidents in the future.