silver-forge[.]xyz

The domain silver-forge.xyz was identified as a phishing site engaged in brand impersonation targeting Binance. This domain posed an elevated risk by attempting to deceive users through impersonation tactics. As of now, silver-forge.xyz has been taken offline, reducing its immediate threat, but it previously operated as a scam site and should be treated as unsafe.

Technical analysis reveals that silver-forge.xyz was registered through OwnRegistrar, Inc. on September 19, 2025, and resolved to the IP address 192.3.190.186, located in the US under AS36352 (HostPapa). The domain had no SSL certificate and used the nameservers dns1.webproserver.com and dns2.webproserver.com. Its page title was observed as Silver Forge. Two of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker and Webroot, flagged the domain as malicious. It appeared on one security blocklist, specifically PhishDestroy, and had a Gridinsoft trust score of 0/100. Google Safe Browsing did not flag the domain.

Anyone who interacted with silver-forge.xyz under the impression it was affiliated with Binance should immediately change any credentials used, enable two-factor authentication on relevant accounts, and monitor for unauthorized activity or fraud. Victims should also report the phishing attempt to Binance and appropriate cybersecurity authorities. Since no drainer kit was detected, crypto wallet users do not need to revoke token approvals but should remain vigilant for related scams.