safpal-wallet[.]pages[.]dev

The domain safpal-wallet.pages.dev has been identified as a high-risk entity engaging in brand impersonation of SafePal. This malicious domain is designed to mislead users into believing it is associated with SafePal, a known cryptocurrency wallet provider. There are no indications that this domain is utilizing a drainer kit, but the potential for user credential theft remains significant.

Technical indicators reveal that the domain was created on April 21, 2026, and is registered through Cloudflare Pages. VirusTotal has flagged this domain with a detection score of 2/95, indicating that only a small fraction of security vendors recognize it as a threat. The domain is currently resolving to IP address 172.66.44.106, which is hosted by Cloudflare, Inc. The domain appears on one security blocklist and has been specifically flagged by PhishDestroy, indicating a recognized threat to users.

As of now, safpal-wallet.pages.dev is still active and continues to pose a risk to users. The current status indicates that it remains unaddressed, which raises concerns regarding ongoing exposure for individuals attempting to access SafePal services. Users are advised to exercise caution and refrain from interacting with this domain, as it could be used for phishing attempts or data harvesting. Regular monitoring and reporting of such domains should be conducted to mitigate risks associated with brand impersonation.