forestinc[.]live

This report analyzes the domain forestinc.live. The site presents a page titled "Just a moment...", a generic loading screen often used to mask malicious activity or serve as a gateway to a phishing or credential harvesting operation. No specific brand or service is claimed on the page. The primary threat posed by this domain is likely phishing, where users are tricked into entering sensitive information, or the distribution of malware through a deceptive redirect chain.

Technical evidence shows the domain was created on 2026-02-21, making it very recent. It is hosted on IP address 172.67.189.202, located in the United States, and associated with AS13335 Cloudflare, Inc. The domain uses nameservers oswald.ns.cloudflare.com and paislee.ns.cloudflare.com. VirusTotal reports 3 detections out of 95 vendors, with flags from Fortinet, Gridinsoft, and SOCRadar. It appears on 1 blocklist. The site has no SSL certificate and holds a GridinSoft trust rating of 0 out of 100.

The domain is currently offline or down, indicating it may have been taken down by the registrar or hosting provider. The risk level is high due to the combination of a very recent creation date, lack of SSL, low trust rating, and flags from multiple security vendors, despite the low detection count. Users should avoid any interaction with this domain.