mykrakenmlogin[.]wordpress[.]com

This domain, mykrakenmlogin.wordpress.com, is under investigation for brand impersonation targeting Kraken, a cryptocurrency exchange platform. The domain remains active as of the latest analysis, with no confirmed takedown or mitigation measures in place. The page title, "Krakèn Login- Sign in | The Easiest Way to Buy, Sell & Margin," explicitly mimics Kraken’s official branding, suggesting an intent to deceive users into disclosing sensitive credentials or financial information. Infrastructure analysis reveals the domain was registered on March 03, 2000, through MarkMonitor Inc., a registrar commonly associated with legitimate enterprise domains. It resolves to the IP address 192.0.78.12 and employs a Let’s Encrypt SSL certificate, which provides encryption but does not validate the legitimacy of the site. VirusTotal scans report 0 detections out of 95 vendors, indicating no current flagging by security tools. The domain’s hosting provider, WordPress.com, is frequently exploited for impersonation due to its ease of use and perceived legitimacy. Given the domain’s active status and lack of detection by security vendors, the risk of credential theft or financial fraud remains elevated. Organizations and users are advised to block access to this domain at the network level and implement DNS-based filtering to prevent interaction. End-users should be educated to verify domain authenticity before entering login credentials, particularly for financial platforms. Monitoring for similar impersonation attempts targeting Kraken or other cryptocurrency services is recommended, as this domain may serve as a template for future campaigns.