safecoinledger[.]com

Analysis of safecoinledger.com confirms its classification as a crypto scam targeting Ethereum users, now offline but previously active. The domain was registered on May 28, 2025, through HOSTINGER operations, UAB, and resolved to IP 64.29.17.65 (US, AS16509 Amazon.com, Inc.). Security vendors flagged the domain on VirusTotal, with 10 of 93 detections at the time of assessment, while AlienVault OTX recorded it in one threat intelligence pulse. The domain appeared on a single security blocklist and was blocked by PhishDestroy.

Scamadviser assigned a trust score of 1/100, further indicating malicious intent. The SSL certificate was issued under the R13 root, a detail that may assist in tracking related infrastructure. The page title, 'Safe Coin Ledger | Be early to the future of finance,' aligns with known crypto scam messaging, though no further content analysis is available.

Defenders should treat this domain as part of a broader crypto scam campaign, particularly given its explicit impersonation of Ethereum. While the site is currently offline, monitoring for re-registration or shifts in hosting (e.g., same IP, registrar, or SSL issuer) is recommended. Historical DNS and WHOIS records should be preserved for retrospective analysis, and any associated IPs or certificates should be cross-referenced with other known scam domains to identify patterns in the threat actor's infrastructure.