new-safpal-walt[.]pages[.]dev

The domain new-safpal-walt.pages.dev was registered on April 21, 2026 and is hosted on a publicly available web‑hosting platform. DNS resolution points to IP address 172.66.46.254, which is assigned to an infrastructure provider located in Canada. The site presents a valid TLS certificate issued by a widely trusted certificate authority, and the HTTP response code is 200, indicating that the page is reachable. The page title returned by the server is "SafePal Wallet – Secure, Multi‑Chain Cryptocurrency Wallet," directly referencing the SafePal brand, which aligns with the reported brand‑impersonation classification. Reputation data shows a trust score of 0 out of 100 from a known scoring engine, and the domain is listed on a single security blocklist. VirusTotal has recorded scans by 91 vendors with no current detections; however, the absence of detections does not constitute a safety guarantee. Current intelligence does not include a content analysis beyond the page title, leaving uncertainty about any credential‑capture forms or additional malicious payloads that may be served. Defenders should treat the domain as malicious: block DNS resolution and HTTP(S) traffic to the domain at perimeter defenses, add the domain to internal blocklists, and monitor for related indicators such as connections to the observed IP address. Further investigation, including sandboxed browsing and traffic capture, is recommended to determine the full scope of the threat.