forge[.]compiller[.]cc

This domain, forge.compiller.cc, operates as a credential harvesting platform targeting Ethereum wallet users. The page title 'FORGE ETH' suggests an attempt to mimic legitimate cryptocurrency wallet interfaces, likely prompting visitors to enter private keys or recovery phrases under false pretenses. Analysis indicates the domain was designed to deceive users into disclosing sensitive authentication details, enabling unauthorized access to digital assets stored in Ethereum-compatible wallets. Infrastructure analysis reveals the domain was registered on June 5, 2026, through Cloudflare, Inc., and resolved to IP address 188.114.97.3. Security vendors flagged the domain in 3 out of 95 detection engines on VirusTotal, indicating limited but present detection coverage. The SSL certificate, issued by Google Trust Services, provides encrypted connections, which may be leveraged to enhance the appearance of legitimacy while obscuring malicious intent. Despite its current offline status, the domain remains a documented threat in blocklist databases. Users who accessed forge.compiller.cc should immediately revoke any active sessions associated with Ethereum wallets or related services. All credentials, private keys, or recovery phrases entered on the site must be considered compromised. Affected individuals should transfer remaining assets to a new, secure wallet address and monitor transaction histories for unauthorized activity. System scans using updated security tools are recommended to detect potential secondary infections or persistent threats. Network administrators should block the domain and associated IP address 188.114.97.3 at the perimeter to prevent further exposure.