sfepal[.]created[.]app

This report details the threat associated with the domain sfepal.created.app. The site presented a page titled "Safepal Wallet - Safe Crypto Management," which is a deceptive attempt to impersonate the legitimate SafePal cryptocurrency wallet brand. The primary threat posed by this domain is a cryptocurrency phishing or scam operation, designed to trick users into believing they are interacting with the official SafePal service, likely to steal login credentials, recovery phrases, or funds.

Technical analysis reveals the domain was created on 2023-07-12 and registered through Tucows Domains Inc. The IP address 216.150.16.159, located in the United States, is associated with AS16509 Amazon.com, Inc. The site uses a Let's Encrypt SSL certificate (R13) and its nameservers, ns1.vercel-dns.com and ns2.vercel-dns.com, point to Vercel hosting. VirusTotal flagged the domain with 8 out of 95 detections, and it is present on one blocklist. Security vendors detecting the threat include CyRadar, ESET, G-Data, Kaspersky, and SOCRadar.

The domain is currently reported as DOWN or OFFLINE. The risk level is considered high due to the impersonation of a well-known cryptocurrency brand, confirmed malicious detections by multiple reputable security vendors, and the potential for financial loss. Users who may have previously interacted with this site should take immediate security precautions.