callkrakenphonesupport[.]wordpress[.]com

The domain callkrakenphonesupport.wordpress.com was registered on February 21, 2026 through Automattic Inc. and is hosted on the WordPress.com infrastructure (AS2635 Automattic, Inc) with the IP address 192.0.78.13 located in the United States. The site presented a TLS certificate issued by Let’s Encrypt (E8) and responded with HTTP status 410, indicating the content has been removed. The page title captured from the site reads “kraken customer support ☎️ ⫸+1808-740-0122☎️ ⫸ Phone support all exchange issues/problems – kraken customer support”, explicitly referencing the Kraken brand and suggesting a crypto‑related support scam. Technical fingerprints show the presence of WordPress, MySQL, PHP, Nginx, HSTS, and HTTP/3, all typical of the WordPress.com hosting environment.

Security telemetry shows that nine of ninety‑three VirusTotal scanners flagged the domain, and it is listed on three public blocklists. Additional protective services—PhishDestroy, MetaMask, and SEAL—have blocked the domain, while Google Safe Browsing classifies it as social engineering. The domain’s nameservers (ns1‑ns4.wordpress.com) confirm its association with the WordPress.com platform.

Current evidence confirms a brand‑impersonation campaign targeting Kraken users with a crypto‑scam narrative; the exact content of the landing page beyond the title has not been captured. Defenders should add the domain and its hosting IP to network blocklists, monitor for similar subdomains under the wordpress.com namespace, and enforce URL filtering that includes Google Safe Browsing and the identified blocklists. Ongoing observation of new registrations that mimic Kraken branding is recommended to pre‑empt further impersonation attempts.