Finally managed to get my site verified to my account here! I've had the correct verification code embedded at the bottom of krebsonsecurity.com for months. But apparently, you also need to add something in the "extra fields" area of your Mastodon profile.
As suggested by @jerry, I added the words "website" and then the full URL in the box next to it and hit save. After that, the site was verified!