krakenlognn[.]wordpress[.]com

Analysis of krakenlognn.wordpress.com shows a domain hosted on WordPress.com infrastructure that has been flagged for brand impersonation of the cryptocurrency exchange Kraken. The site returned an HTTP 410 Gone response, indicating that the content has been removed, yet Google Safe Browsing classifies the URL as a social engineering threat. VirusTotal scans recorded five detections out of ninety‑five vendors, confirming that multiple security products consider the domain malicious. The page title presented by the server is "WordPress.com — Get a Free Blog Here," which does not reference the targeted brand, suggesting that the page either served a generic WordPress landing page after takedown or never displayed brand‑specific content. The domain was created on March 03, 2000 and is served by the nameservers ns1‑ns4.wordpress.com, an official WordPress.com set.

DNS resolution points to 192.0.78.12, an IP owned by AS2635 Automattic, Inc., located in the United States, confirming the hosting environment is the legitimate WordPress.com cloud. TLS is provided by a Let’s Encrypt certificate (E8), and the server advertises modern protocols including HSTS and HTTP/3, consistent with legitimate WordPress.com deployments. Registration details list MarkMonitor, Inc. as the registrar, a service commonly used by brands to protect their trademarks, which may indicate a compromised or abused account. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy.

The scam type is identified as a crypto scam, aligning with the impersonation of Kraken. While the site is currently offline, its previous activity, vendor detections, and Safe Browsing flag demonstrate a credible threat.