safetrade[.]icu

The domain safetrade.icu was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to IP address 172.67.220.23, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a TLS certificate identified as WE1, but the Gridinsoft trust score for the domain is 0 out of 100, indicating a complete lack of trust.

The page title returned by the server reads "Safetrade - Professional Crypto, Forex, and Stocks Trading Corp," and the intelligence categorises the operation as a crypto scam that impersonates the brand base. The domain appears on one security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis shows that three of ninety‑three security vendors flagged the domain, reinforcing the malicious assessment.

Although the site is offline, the infrastructure evidence—Cloudflare hosting, low trust score, and the presence on blocklists—suggests that the domain was used to lure victims into a fraudulent crypto‑trading scheme. Defenders should continue to block the domain and the associated IP address at network perimeters, add safetrade.icu to internal threat feeds, and monitor Cloudflare‑owned address space for any re‑use of similar patterns. Ongoing vigilance is advised in case the actors reactivate the domain or replicate the hosting configuration for a new campaign targeting the same brand.