# en-safepal.org — MALICIOUS

> en-safepal.org is linked to phishing risks and is currently offline. Avoid accessing this domain to protect your personal data.

## Summary
PhishDestroy identifies en-safepal.org as a medium-risk generic phishing domain created on February 21, 2026. This domain was flagged due to suspicious activity associated with fraudulent attempts to steal user information.

Technical analysis reveals the domain appears on three security blocklists and was registered through a defunct service, raising credibility concerns. VirusTotal flagged it by multiple security vendors, indicating its malicious intent.

Currently, en-safepal.org is offline and inactive. Users are advised to avoid visiting the domain or submitting any personal data. Continued monitoring ensures prompt action if the domain reappears.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Safepal Wallet — Secure Crypto Hardware & Software App

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 172.67.163.196
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "Fortinet", "G-Data", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01990168-307d-7605-965f-183d87a9a2f3.png
- PhishDestroy: https://phishdestroy.io/domain/en-safepal.org/
- LLM endpoint: https://phishdestroy.io/domain/en-safepal.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-safepal.org/
Last updated: 2026-03-18