convert---eth-to--usdts[.]webflow[.]io

The domain convert---eth-to--usdts.webflow.io was created on May 08, 2013 and is presently taken offline. Infrastructure analysis shows the domain resolves to IP 104.18.36.248, an address owned by Cloudflare (AS13335) located in the United States. Both authoritative nameservers, journey.ns.cloudflare.com and lamar.ns.cloudflare.com, belong to Cloudflare, and the site served over HTTP/3 using a TLS certificate issued by Google Trust Services under the WE1 label. The HTTP response returned a 404 status code, indicating that the page content is no longer reachable.

The page title observed during scanning, "ETH to USDT | Convert Ethereum to USDT - Kraken," directly references the Kraken brand, and the domain is listed as impersonating Kraken in the intelligence feed. Google Safe Browsing classifies the URL as a social‑engineering threat, and PhishDestroy has added it to its blocklist, marking it as a known crypto‑scam vector. The registrar information shows registration through MarkMonitor, Inc., a provider commonly used for legitimate brand protection, suggesting possible abuse of a compromised or mis‑configured account. A Scamadviser trust score of 1 / 100 further reflects the malicious nature of the site.

VirusTotal analysis recorded 15 detections out of 95 scanned security vendors, reinforcing the high‑risk assessment. While the domain’s age and legitimate‑looking registrar might cause false confidence, the combination of brand‑specific page title, social‑engineering flag, blocklist entry, and multiple vendor detections confirms a high‑confidence impersonation campaign targeting Kraken users for crypto‑related fraud. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and advise users to verify URLs against official Kraken channels.