Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
forge-eth[.]co
“FORGE ETH”
साक्ष्य सारांश
Analysis of forge-eth.co as of July 25, 2026 indicates that the domain is associated with a crypto‑related phishing campaign. The site title reported by scanners is “FORGE ETH”, suggesting an attempt to lure victims interested in Ethereum. VirusTotal records show that six of ninety‑four scanners flagged the domain, providing independent confirmation of malicious intent. The domain resolves to the IPv4 address 37.1.204.81, which is registered to AS58061 Scalaxy B.V. in the Netherlands. Hosting details reveal an Ubuntu operating system running Node.js behind an Nginx web server, with the Express framework and Cloudflare as a reverse‑proxy; HTTP responses include HSTS headers, indicating enforcement of TLS. The SSL certificate is identified as “R12”, confirming that transport encryption is in place.
Registrant information lists Iroko as the registrar, and the authoritative name servers are ns73.domaincontrol.com and ns74.domaincontrol.com, both typical of GoDaddy’s DNS service. Multiple defensive feeds have already taken action against the domain. PhishDestroy, MetaMask, and SEAL have added it to their blocklists, and it appears on three additional security blocklists. The site is currently reported as offline, which may be a temporary takedown or a deliberate shutdown after initial distribution. No further content has been captured beyond the page title, so the exact phishing payload or credential‑stealing forms remain unknown.
Defenders should continue to block traffic to 37.1.204.81 and monitor for any re‑hosting of the same infrastructure, especially services that reuse the same Node.js/Express stack or the same Cloudflare configuration. Threat intel platforms should update indicators of compromise to include the domain name, the resolved IP, the registrar (Iroko), and the observed name servers.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260315-D1D23B- कैप्चर किए गए पेज का शीर्षक
- FORGE ETH
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
तकनीकें
8 उच्च-विश्वसनीयता वाली तकनीकें पहचानी गईं
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of forge-eth.co · checked Mar 15, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।