forbet[.]live

The domain forbet.live has been identified as a phishing site engaged in brand impersonation, specifically targeting the Ethereum cryptocurrency community. This domain posed a risk by attempting to deceive users into believing it was associated with Ethereum, potentially to steal sensitive information or assets. The site is currently taken offline, reducing immediate risk, but users should remain cautious if they interacted with the domain while it was active.

Technical analysis shows that forbet.live was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Forcepoint ThreatSeeker, and SOCRadar. The domain was registered through SD-onenetwork (ASN: 16276) and resolved to the IP address 57.129.97.29, located in Germany under AS16276 OVH SAS. It appeared on one security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0/100. The SSL certificate was issued by XUI.one, and the page title observed was 'FORBET | Enter the world of sport and stakes!'. Nameservers were gabriel.ns.cloudflare.com and noor.ns.cloudflare.com. Google Safe Browsing did not flag the site, and the HTTP status was 200 while active.

Users who interacted with forbet.live, especially those who connected cryptocurrency wallets, should immediately revoke any token approvals and transfer assets to a new wallet to mitigate potential loss. If login credentials were entered, it is recommended to change associated passwords, enable two-factor authentication, and monitor accounts for suspicious activity. Suspected phishing incidents involving forbet.live can be reported to relevant security organizations or anti-phishing services to help prevent further harm.