web3-defi27[.]icu

web3-defi27.icu is a confirmed SafePal impersonation scam, designed to deceive users into divulging sensitive information such as login credentials and private keys. The domain poses a significant threat to the security and financial well-being of individuals who may mistakenly believe it to be an official SafePal website.

Analysis indicates that 12 out of 95 security vendors flag this domain as malicious, highlighting its potential for fraudulent activities. The domain was registered through Go Daddy, LLC on February 27, 2026, and is currently hosted on an IP address located in Japan (JP) under the Autonomous System AS152194, operated by CTG Server Limited. The domain has been taken offline and is listed on 2 security blocklists, including PhishDestroy and ScamSniffer. The SSL certificate used was issued by Let's Encrypt, a common choice for legitimate and malicious sites alike due to its ease of acquisition.

If users have visited web3-defi27.icu, they should immediately check their SafePal accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial transactions and report any suspicious activities to their respective financial institutions. Additionally, users are advised to exercise caution when clicking on links or entering credentials on websites that appear similar to SafePal's official domain.