forexapp[.]me

Analysis of forexapp.me shows a domain registered through NameSilo, LLC on July 31, 2025. The authoritative nameservers are clarissa.ns.cloudflare.com and rene.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. DNS resolution points to IP address 188.114.96.3, a host that is not presently linked to known legitimate services and is therefore a potential vector for malicious delivery.

The domain has been flagged by the PhishDestroy blocklist and appears on an additional security blocklist, confirming that at least two independent threat‑intelligence feeds consider it malicious. VirusTotal records indicate that the domain was submitted to 91 scanning vendors; none of the vendors raised a detection at the time of analysis, but the absence of detections does not constitute a safety guarantee. No public Safe Browsing, OTX, SSL certificate, HTTP status, trust‑score, or page‑title information is available in the current data set, leaving those surface‑level indicators unverified.

Given the registration age of less than one year, the reliance on Cloudflare DNS, and the presence on multiple phishing‑related blocklists, the domain should be treated as a high‑confidence phishing infrastructure pending further content analysis. Defenders are advised to block forexapp.me at network perimeter devices, add its resolving IP 188.114.96.3 to deny lists, monitor for any outbound connections to that address, and continue to watch for updates from threat‑intel feeds that may reveal additional payloads or victim targeting patterns.