reaktivierung-safepal[.]com

The domain reaktivierung-safepal.com operates as a brand impersonation threat specifically targeting Binance users through a fraudulent SafePal crypto hardware wallet scheme. Analysis indicates this domain was designed to mimic the official SafePal wallet interface, presenting itself as the legitimate "SafePal Crypto Hardware Wallet (Official)" to deceive users into disclosing sensitive credentials or transferring assets. Current status confirms the domain has been taken offline, though prior activity suggests it was actively used for malicious purposes. Technical indicators reveal multiple red flags associated with reaktivierung-safepal.com. The domain is flagged by 5 of 95 security vendors on VirusTotal, indicating detection by established malware and phishing engines. Infrastructure analysis shows the domain was registered through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The domain was created on February 21, 2026, an anomalous future date suggesting potential falsification of registration records. It resolves to the IP address 172.67.189.100, which has been linked to other suspicious domains leveraging content delivery networks to obscure origin. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, further confirming its malicious classification. Given the elevated risk level and confirmed brand impersonation tactics, users are advised to treat any prior interaction with reaktivierung-safepal.com as compromised. Immediate actions should include revoking access to any connected crypto wallets, resetting credentials for Binance and SafePal accounts, and monitoring for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address. While the domain is currently offline, threat actors may re-deploy similar infrastructure; users should verify official sources (e.g., binance.com, safepal.com) before engaging with any crypto wallet services.