What are the subjects of the phishing (domains, URLs or IPs)?
safepal.com.co
https://safepal.com.co
What are the impersonated domains?
https://safepal.com
Where or how did you discover this phishing?
I discovered this phishing website during a manual investigation of cryptocurrency-related phishing campaigns.
The domain was identified because it uses the SafePal brand name and presents itself as an official or affiliated SafePal resource despite having no affiliation with the legitimate service.
Do you have a screenshot?
Screenshot
Related external source
https://safepal.com
Additional Information or Context
The domain safepal.com.co impersonates the official SafePal wallet service and is not affiliated with the legitimate SafePal project.
The website uses the SafePal brand name to create a false impression of legitimacy and may be used to target cryptocurrency users through phishing, wallet compromise, recovery phrase harvesting, credential theft, or cryptocurrency fraud.
Users may mistakenly trust the website because it appears related to the official SafePal service.
Screenshots have been attached as evidence.
What are the subjects of the phishing (domains, URLs or IPs)?
safepal.com.co
https://safepal.com.co
What are the impersonated domains?
https://safepal.com
Where or how did you discover this phishing?
I discovered this phishing website during a manual investigation of cryptocurrency-related phishing campaigns.
The domain was identified because it uses the SafePal brand name and presents itself as an official or affiliated SafePal resource despite having no affiliation with the legitimate service.
Do you have a screenshot?
Screenshot
Related external source
https://safepal.com
Additional Information or Context
The domain safepal.com.co impersonates the official SafePal wallet service and is not affiliated with the legitimate SafePal project.
The website uses the SafePal brand name to create a false impression of legitimacy and may be used to target cryptocurrency users through phishing, wallet compromise, recovery phrase harvesting, credential theft, or cryptocurrency fraud.
Users may mistakenly trust the website because it appears related to the official SafePal service.
Screenshots have been attached as evidence.