uskeakennlogin[.]wordpress[.]com

The domain uskeakennlogin.wordpress.com was identified as a credential phishing site and is currently offline, returning HTTP status 410. Technical fingerprinting shows the host resolves to IP 192.0.78.12, an address owned by Automattic, Inc. (AS2635) in the United States. The domain is served through the standard WordPress.com name server set (ns1‑ns4.wordpress.com) and presents a valid Let's Encrypt certificate (E8) that supports HSTS and HTTP/3. Underlying technologies detected include WordPress, MySQL, PHP, and Nginx, confirming the site operated on a typical WordPress stack. The page title retrieved from the site was "WordPress.com — Get a Free Blog Here," which does not directly reveal malicious intent but aligns with the observed credential phishing classification.

Registrar information indicates the domain was registered via MarkMonitor, Inc. on March 03, 2000, a date that predates the observed malicious activity and suggests the domain may have been repurposed. VirusTotal scans flagged the domain by seven of ninety‑five security vendors, reinforcing the suspicion of malicious use. The domain is listed on one external blocklist and was previously blocked by the PhishDestroy service, providing additional corroboration of its threat status.

Given the elevated risk rating, defenders should ensure that any outbound connections to 192.0.78.12 are denied at the network perimeter, and DNS filtering should continue to block uskeakennlogin.wordpress.com. Continuous monitoring of the domain’s registration and DNS records is advised in case the site is re‑activated. Organizations should also educate users about unexpected login prompts that reference WordPress services, as the page title suggests a generic blog offering that could be leveraged to lure credentials. The combination of vendor detections, blocklist presence, and the credential phishing label indicates that the domain should be treated as malicious until proven otherwise.