FORENSA will never ask for
- Your private key.Not to trace, not to verify, not to "secure" anything. Nothing on this site has a field for it.
- Your seed phrase.No real service needs those words. Anyone asking for them in our name is running a scam.
- A wallet connection to trace.Tracing reads public explorers from your browser. There is no connect button and no signature request anywhere on the site.
- A fee to recover your funds.FORENSA traces, documents and seals. It does not recover money, and nobody from FORENSA will offer to for a fee.
- A conversation in your DMs.FORENSA never messages you first, on X, Telegram, Discord or email. If "FORENSA support" writes to you, it isn't us.
What the server keeps
Stored
- Fingerprints for sealsThe SHA-256 of a case file you seal, its Merkle proof and the batch transaction. A fingerprint cannot be turned back into the file.
- Case copies, only when you press ShareThe case file's public chain data, under a link that you choose to hand out. Without Share, nothing is uploaded.
- Addresses you put on watchOnly when you add one on /watch, with the short note you give it, so the server can tell you when it moves.
- A labels cachePublic labels for public addresses, kept for a few hours so we ask the label service less often.
Never stored
- Anything typed into a freeze letterYour name, email, phone and the details you add are put together in your browser and never sent to us.
- Your own wallet from /check or /helpThose pages ask the explorers directly from your browser. Only the destination's public address is looked up for labels.
- Keys, seed phrases, accountsThere is no sign-up, so there is nothing to leak.
- TrackingNo analytics, no ad pixels, no third-party cookies. Your IP address is held in memory for up to ten minutes for rate limiting and is never written to disk.
The code you are running
Every script, style and font is served from this domain. The server publishes a SHA-256 fingerprint of each one in /integrity.json, recomputed from the files on disk.
Live integrity manifest reading
Build id
–
Files fingerprinted
–
Generated
–
Check any file yourself: download it and run
shasum -a 256.Open /integrity.jsonContent security policy
The browser is told to run scripts from this domain only (script-src 'self'): no third-party scripts, no inline code, no eval. It may only connect to the hosts below. This is the policy the server sent with this page:
Reading the live header…
Official channels
The only official links are the ones on /token. The header, the footer and the token page all read the same configuration file, so there is no second list. If an account, contract or "support desk" is not listed there, it is not FORENSA.