Curve Finance

Crypto & web3 Switzerlandcurve.financeStablecoin exchange
Cert findings · 24 h
1
Cert findings · 7 days
226
226 reported or listed
Registered lookalikes
211
9 listed by a source or an address list
Official domains
3
verified from Curve Finance's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of curve.finance registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

9 of the 211 are listed by a source or resolve to a listed address, checked hourly.

  1. curve.qa US · AS63410 · PrivateSystems Networks2 addressesLookalike of curve.finance · the ending .qa
    MX present
    DetailsHide details for curve.qa
    Domain
    curve.qa
    Spelling
    The name of curve.finance with the ending .qa
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    108.160.156.25 · United States · AS63410 PRIVATESYSTEMS - PrivateSystems Networks
    2600:4c00:50d:eb1::45b
    MX
    curve-qa.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. curve.ro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .ro
    CloudflareMX present
    DetailsHide details for curve.ro
    Domain
    curve.ro
    Spelling
    The name of curve.finance with the ending .ro
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    104.21.19.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:13a0
    2606:4700:3036::ac43:baf4
    Cloudflare
    Cloudflare (104.21.19.160, 172.67.186.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. curve.rs DE · AS51167 · CONTABO Contabo GmbHLookalike of curve.finance · the ending .rs
    ContaboMX present
    DetailsHide details for curve.rs
    Domain
    curve.rs
    Spelling
    The name of curve.finance with the ending .rs
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    164.68.127.227 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (164.68.127.227): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.curve.rs
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. curve.ru RU · AS210079 · EUROBYTE EuroByte LLCLookalike of curve.finance · the ending .ru
    MX present
    DetailsHide details for curve.ru
    Domain
    curve.ru
    Spelling
    The name of curve.finance with the ending .ru
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    37.143.11.11 · Russia · AS210079 EUROBYTE EuroByte LLC
    MX
    mail.curve.ru
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. curve.sa US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .sa
    CloudflareMX present
    DetailsHide details for curve.sa
    Domain
    curve.sa
    Spelling
    The name of curve.finance with the ending .sa
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    104.21.86.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.137.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:56e1
    2606:4700:3034::ac43:896a
    Cloudflare
    Cloudflare (104.21.86.225, 172.67.137.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    curve-sa.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. curve.se SE · AS39570 · LOOPIA Loopia AB2 addressesLookalike of curve.finance · the ending .se
    DetailsHide details for curve.se
    Domain
    curve.se
    Spelling
    The name of curve.finance with the ending .se
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    194.9.94.85 · Sweden · AS39570 LOOPIA Loopia AB
    194.9.94.86 · Sweden · AS39570 LOOPIA Loopia AB
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. curve.sk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .sk
    Cloudflare
    DetailsHide details for curve.sk
    Domain
    curve.sk
    Spelling
    The name of curve.finance with the ending .sk
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    104.21.22.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1654
    2606:4700:3037::ac43:cb7c
    Cloudflare
    Cloudflare (104.21.22.84, 172.67.203.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. curve.so US · AS16509 · Amazon.com, Inc.2 addressesLookalike of curve.finance · the ending .so
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for curve.so
    Domain
    curve.so
    Spelling
    The name of curve.finance with the ending .so
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates curve.so to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. curve.tm US · AS14618 · Amazon.com, Inc.Lookalike of curve.finance · the ending .tm
    Parking page · Atom
    DetailsHide details for curve.tm
    Domain
    curve.tm
    Spelling
    The name of curve.finance with the ending .tm
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
    Parking page · Atom
    The registry delegates curve.tm to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. curve.vu DE · AS48596 · INWX InterNetworX Managemen…Lookalike of curve.finance · the ending .vu
    DetailsHide details for curve.vu
    Domain
    curve.vu
    Spelling
    The name of curve.finance with the ending .vu
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    45.87.158.7 · Germany · AS48596 INWX InterNetworX Management GmbH
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. curve.ws US · AS16509 · Amazon.com, Inc.2 addressesLookalike of curve.finance · the ending .ws
    Parking page · GoDaddy CashParking
    DetailsHide details for curve.ws
    Domain
    curve.ws
    Spelling
    The name of curve.finance with the ending .ws
    First found
    2026-11-02 · the day the daily DNS check first found it registered
    Addresses
    3.33.243.145 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · GoDaddy CashParking (parking page)
    15.197.204.56 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · GoDaddy CashParking (parking page)
    Parking page · GoDaddy CashParking
    The registry delegates curve.ws to GoDaddy CashParking’s nameservers, which answer for it. GoDaddy CashParking (3.33.243.145, 15.197.204.56): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC

New registrations using the name

New domains with Curve Finance's name in them, from registry zone files (ICANN CZDS), checked daily like the lookalikes above. We matched them by name alone; resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

  1. curvefi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefi”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for curvefi.icu
    Domain
    curvefi.icu
    Match
    A new registration containing “curvefi”, one of the names we match for Curve Finance
    First found
    2026-11-04 · the day the .icu zone file first listed it as a new registration
    Registered
    2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · curvefi.icu · in the feed since 2026-11-04 11:50 UTC
    Addresses
    104.21.64.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:40bd
    2606:4700:3037::ac43:bb5f
    Cloudflare
    Cloudflare (104.21.64.189, 172.67.187.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. proposal-curvefinance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for proposal-curvefinance.icu
    Domain
    proposal-curvefinance.icu
    Match
    A new registration containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-04 · the day the .icu zone file first listed it as a new registration
    Registered
    2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · proposal-curvefinance.icu · in the feed since 2026-11-03 23:49 UTC
    Addresses
    104.21.75.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:d6f9
    2606:4700:3032::6815:4b3c
    Cloudflare
    Cloudflare (104.21.75.60, 172.67.214.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. governance-curvefinance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskRegistry lookup queuedCloudflare
    DetailsHide details for governance-curvefinance.icu
    Domain
    governance-curvefinance.icu
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-curvefinance.icu · in the feed since 2026-10-30 11:39 UTC
    Addresses
    104.21.12.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.167.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:a7ba
    2606:4700:3033::6815:cd8
    Cloudflare
    Cloudflare (104.21.12.216, 172.67.167.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. governance-curvefinance.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
    DetailsHide details for governance-curvefinance.xyz
    Domain
    governance-curvefinance.xyz
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · governance-curvefinance.xyz · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · governance-curvefinance.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.20.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.190.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:bed8
    2606:4700:3035::6815:1414
    Cloudflare
    Cloudflare (104.21.20.20, 172.67.190.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. curvefinance.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskCloudflare
    DetailsHide details for curvefinance.pro
    Domain
    curvefinance.pro
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-08-02 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · curvefinance.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.85.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:5582
    2606:4700:3031::ac43:ce2d
    Cloudflare
    Cloudflare (104.21.85.130, 172.67.206.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. curvefinance.online US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskCloudflare
    DetailsHide details for curvefinance.online
    Domain
    curvefinance.online
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-08-01 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · curvefinance.online · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.89.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:a5bc
    2606:4700:3037::6815:59e3
    Cloudflare
    Cloudflare (104.21.89.227, 172.67.165.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. curvefinance.shop US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskCloudflare
    DetailsHide details for curvefinance.shop
    Domain
    curvefinance.shop
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .shop zone file, already registered
    Registered
    2026-07-30 · Dynadot Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · curvefinance.shop · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.92.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:5cf9
    2606:4700:3037::ac43:c9b4
    Cloudflare
    Cloudflare (104.21.92.249, 172.67.201.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. curvefinance.claims US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    Listed by MetaMaskCloudflare
    DetailsHide details for curvefinance.claims
    Domain
    curvefinance.claims
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .claims zone file, already registered
    Registered
    2026-06-12 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · curvefinance.claims · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.80.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:99d1
    2606:4700:3033::6815:50d0
    Cloudflare
    Cloudflare (104.21.80.208, 172.67.153.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. curvefi.bet DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “curvefi”
    5 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityHetzner +1
    DetailsHide details for curvefi.bet
    Domain
    curvefi.bet
    Match
    A domain containing “curvefi”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .bet zone file, already registered
    Registered
    2026-06-10 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 46.62.237.138 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.161.230.87 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.161.47.86 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.78.156.59 (curvefi.bet resolved to it 2026-11-04 23:32 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:5506:c09c:e9b:11b3
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    2a05:d018:1d22:801:a216:a799:8c87:df21
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. curvefinance.org NL · AS49981 · WorldStream WorldStream B.V.2 addressesContains “curvefinance”
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityNamecheap
    DetailsHide details for curvefinance.org
    Domain
    curvefinance.org
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2020-10-02 · NameCheap, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · curvefinance.org resolved to it 2026-11-04 23:32 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.
    104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
    Namecheap
    Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. curve-finance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curve-finance”
    PhishDestroy CommunitySuspicious · highRegistry lookup queuedCloudflare
    DetailsHide details for curve-finance.icu
    Domain
    curve-finance.icu
    Match
    A domain containing “curve-finance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.60.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.191.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:bf22
    2606:4700:3035::6815:3c24
    Cloudflare
    Cloudflare (104.21.60.36, 172.67.191.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. curvefinance.cloud US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”
    PhishDestroy CommunitySuspicious · highCloudflare
    DetailsHide details for curvefinance.cloud
    Domain
    curvefinance.cloud
    Match
    A domain containing “curvefinance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-08-03 · Dynadot, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.71.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:474c
    2606:4700:3036::ac43:8fe7
    Cloudflare
    Cloudflare (104.21.71.76, 172.67.143.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. curve-finance.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “curve-finance”
    PhishDestroy CommunitySuspicious · mediumParking page · Afternic
    DetailsHide details for curve-finance.xyz
    Domain
    curve-finance.xyz
    Match
    A domain containing “curve-finance”, one of the names we match for Curve Finance
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-02-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates curve-finance.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Crypto & web3

All brands →