# safemooneth.vip — SUSPICIOUS

> PhishDestroy identifies safemooneth.vip as a fake SafeMoon staking scam; 0/95 VirusTotal vendors flagged this active phishing domain. Check the full report.

## Summary
PhishDestroy identifies safemooneth.vip as an active SafeMoon staking scam site designed to harvest cryptocurrency deposits under the guise of staking rewards.

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating a newly emerged threat still below current detection thresholds. The domain resolves to IP address 89.116.192.106, is registered through Realtime Register B.V., secured with a Let's Encrypt SSL certificate, and was created on October 06, 2025. With no presence on major threat intelligence blocklists and absent from Google Safe Browsing and PhishTank repositories, this domain remains undetected by mainstream security engines.

Given its active status and lack of detection, safemooneth.vip poses a high risk to cryptocurrency users seeking legitimate staking opportunities. Users are strongly advised to verify official SafeMoon domains (safemoon.com or app.safemoon.com) and avoid interacting with this site. Block the domain at DNS and network levels, report to SafeMoon security team, and monitor for related domains impersonating SafeMoon services. Network defenders should flag 89.116.192.106 and inspect incoming traffic for HTTP/HTTPS requests to this domain. Immediate action is required to prevent fund loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-10-06 20:35:07
- Registrar: Realtime Register B.V.
- IP: 89.116.192.106

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/safemooneth.vip
- PhishDestroy: https://phishdestroy.io/domain/safemooneth.vip/
- LLM endpoint: https://phishdestroy.io/domain/safemooneth.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/safemooneth.vip/
Last updated: 2026-04-04