silverforge[.]xyz

The domain silverforge.xyz is an active phishing site engaged in brand impersonation targeting Binance users. It presents itself as a legitimate cryptocurrency service but is designed to steal login credentials and personal information through deceptive login pages. As of the latest verification, silverforge.xyz remains operational and poses an elevated risk to visitors, particularly those attempting to access Binance-related services.

Technical indicators confirm the malicious nature of silverforge.xyz. The domain is flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker, and appears on 1 security blocklist (PhishDestroy). It was registered on December 20, 2024, through OwnRegistrar, Inc., and resolves to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the US. The SSL certificate is issued by Actalis S.p.A. / Actalis Domain Validation Server CA G3, and the observed page title is 'Silver Forge'. Google Safe Browsing has not yet flagged the domain, but the low detection rate does not diminish its confirmed threat status.

Users who may have interacted with silverforge.xyz should immediately change their Binance account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or login attempts, and report any suspected fraud to Binance support. Additionally, victims can report the phishing domain to their email provider, browser security teams, or platforms like Google Safe Browsing and PhishTank to help prevent further exploitation.