safepal-wallet[.]at

This domain is classified as a high-risk brand impersonation threat designed to deceive users of the SafePal cryptocurrency wallet service. Analysis indicates the infrastructure is specifically engineered to mimic legitimate SafePal interfaces, potentially harvesting credentials or private keys from unsuspecting victims. Infrastructure analysis reveals the domain safepal-wallet.at was registered on May 29, 2026, with detection metrics showing 15 out of 95 security vendors flagging it as malicious on VirusTotal. The domain appears on three distinct security blocklists and is actively blocked by multiple cryptocurrency security providers. Current WHOIS records indicate the domain remains operational, with no evidence of takedown or remediation efforts. Users encountering this domain should immediately cease interaction and verify wallet integrity. Given the high-risk nature of cryptocurrency credential theft, affected parties are advised to revoke any connected sessions, rotate recovery phrases, and monitor associated accounts for unauthorized transactions. Cryptocurrency wallet users should exclusively access services through verified official channels and enable multi-factor authentication where available to mitigate similar threats.