webtrader[.]tradebtccharts[.]com

The domain webtrader.tradebtccharts.com is observed as an offline site that was registered on October 29, 2024 through PDR Ltd. d/b/a PublicDomainRegistry.com. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. The authoritative nameservers are arch.ns.cloudflare.com and meera.ns.cloudflare.com, both Cloudflare‑operated, indicating the attacker leveraged a reputable CDN to hide origin infrastructure. No TLS certificate was presented for the host, meaning HTTP connections would be unencrypted if the site were reachable.

The only visible page artifact is the HTML title tag “EUR/USD | KrakenProAI”, which directly references the Kraken brand and suggests the site was intended to masquerade as a Kraken‑related service. The brand target is confirmed as Kraken, and the scam type is listed as a crypto scam. Reputation signals show the domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. VirusTotal scans report that one out of ninety‑three security vendors flagged the domain, providing an additional indicator of malicious intent.

No other public threat‑intel sources, such as OTX or Google Safe Browsing, are noted in the available data. Given the combination of brand impersonation, use of a trusted CDN, lack of TLS, and the blocklist entry, the domain should be treated as an elevated‑risk crypto‑related impersonation campaign. Defenders are advised to add the domain to web‑filter deny lists, monitor DNS queries for the host, and consider blocking the associated IP address 188.114.96.3 if it is not required for legitimate Cloudflare services. Continuous re‑evaluation is recommended in case the site becomes active again, and any future traffic should be inspected for credential harvesting or cryptocurrency transaction redirection.