Curve Finance
Registered lookalikes
Spellings of curve.finance registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
9 of the 211 are listed by a source or resolve to a listed address, checked hourly.
- curve.qa US · AS63410 · PrivateSystems Networks2 addressesLookalike of curve.finance · the ending .qaMX present
DetailsHide details for curve.qa
- Domain
- curve.qa
- Spelling
- The name of curve.finance with the ending .qa
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 108.160.156.25 · United States · AS63410 PRIVATESYSTEMS - PrivateSystems Networks2600:4c00:50d:eb1::45b
- MX
- curve-qa.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.ro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .roCloudflareMX present
DetailsHide details for curve.ro
- Domain
- curve.ro
- Spelling
- The name of curve.finance with the ending .ro
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 104.21.19.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.244 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:13a02606:4700:3036::ac43:baf4
- Cloudflare
- Cloudflare (104.21.19.160, 172.67.186.244): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.rs DE · AS51167 · CONTABO Contabo GmbHLookalike of curve.finance · the ending .rsContaboMX present
DetailsHide details for curve.rs
- Domain
- curve.rs
- Spelling
- The name of curve.finance with the ending .rs
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 164.68.127.227 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (164.68.127.227): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.curve.rs
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.ru RU · AS210079 · EUROBYTE EuroByte LLCLookalike of curve.finance · the ending .ruMX present
DetailsHide details for curve.ru
- Domain
- curve.ru
- Spelling
- The name of curve.finance with the ending .ru
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 37.143.11.11 · Russia · AS210079 EUROBYTE EuroByte LLC
- MX
- mail.curve.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.sa US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .saCloudflareMX present
DetailsHide details for curve.sa
- Domain
- curve.sa
- Spelling
- The name of curve.finance with the ending .sa
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 104.21.86.225 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.137.106 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:56e12606:4700:3034::ac43:896a
- Cloudflare
- Cloudflare (104.21.86.225, 172.67.137.106): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- curve-sa.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.se SE · AS39570 · LOOPIA Loopia AB2 addressesLookalike of curve.finance · the ending .se
DetailsHide details for curve.se
- Domain
- curve.se
- Spelling
- The name of curve.finance with the ending .se
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 194.9.94.85 · Sweden · AS39570 LOOPIA Loopia AB194.9.94.86 · Sweden · AS39570 LOOPIA Loopia AB
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.sk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of curve.finance · the ending .skCloudflare
DetailsHide details for curve.sk
- Domain
- curve.sk
- Spelling
- The name of curve.finance with the ending .sk
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 104.21.22.84 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.124 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:16542606:4700:3037::ac43:cb7c
- Cloudflare
- Cloudflare (104.21.22.84, 172.67.203.124): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.so US · AS16509 · Amazon.com, Inc.2 addressesLookalike of curve.finance · the ending .soPhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for curve.so
- Domain
- curve.so
- Spelling
- The name of curve.finance with the ending .so
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates curve.so to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.tm US · AS14618 · Amazon.com, Inc.Lookalike of curve.finance · the ending .tmParking page · Atom
DetailsHide details for curve.tm
- Domain
- curve.tm
- Spelling
- The name of curve.finance with the ending .tm
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates curve.tm to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.vu DE · AS48596 · INWX InterNetworX Managemen…Lookalike of curve.finance · the ending .vu
DetailsHide details for curve.vu
- Domain
- curve.vu
- Spelling
- The name of curve.finance with the ending .vu
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 45.87.158.7 · Germany · AS48596 INWX InterNetworX Management GmbH
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve.ws US · AS16509 · Amazon.com, Inc.2 addressesLookalike of curve.finance · the ending .wsParking page · GoDaddy CashParking
DetailsHide details for curve.ws
- Domain
- curve.ws
- Spelling
- The name of curve.finance with the ending .ws
- First found
- 2026-11-02 · the day the daily DNS check first found it registered
- Addresses
- 3.33.243.145 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · GoDaddy CashParking (parking page)15.197.204.56 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · GoDaddy CashParking (parking page)
- Parking page · GoDaddy CashParking
- The registry delegates curve.ws to GoDaddy CashParking’s nameservers, which answer for it. GoDaddy CashParking (3.33.243.145, 15.197.204.56): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
New registrations using the name
New domains with Curve Finance's name in them, from registry zone files (ICANN CZDS), checked daily like the lookalikes above. We matched them by name alone; resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
- curvefi.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefi”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for curvefi.icu
- Domain
- curvefi.icu
- Match
- A new registration containing “curvefi”, one of the names we match for Curve Finance
- First found
- 2026-11-04 · the day the .icu zone file first listed it as a new registration
- Registered
- 2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · curvefi.icu · in the feed since 2026-11-04 11:50 UTC
- Addresses
- 104.21.64.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:40bd2606:4700:3037::ac43:bb5f
- Cloudflare
- Cloudflare (104.21.64.189, 172.67.187.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- proposal-curvefinance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for proposal-curvefinance.icu
- Domain
- proposal-curvefinance.icu
- Match
- A new registration containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-04 · the day the .icu zone file first listed it as a new registration
- Registered
- 2026-11-03 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · proposal-curvefinance.icu · in the feed since 2026-11-03 23:49 UTC
- Addresses
- 104.21.75.60 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:d6f92606:4700:3032::6815:4b3c
- Cloudflare
- Cloudflare (104.21.75.60, 172.67.214.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-curvefinance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskRegistry lookup queuedCloudflare
DetailsHide details for governance-curvefinance.icu
- Domain
- governance-curvefinance.icu
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-10-30 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-curvefinance.icu · in the feed since 2026-10-30 11:39 UTC
- Addresses
- 104.21.12.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.167.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:a7ba2606:4700:3033::6815:cd8
- Cloudflare
- Cloudflare (104.21.12.216, 172.67.167.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- governance-curvefinance.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedCloudflare
DetailsHide details for governance-curvefinance.xyz
- Domain
- governance-curvefinance.xyz
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · governance-curvefinance.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · governance-curvefinance.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.20.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.190.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:bed82606:4700:3035::6815:1414
- Cloudflare
- Cloudflare (104.21.20.20, 172.67.190.216): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.pro US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskCloudflare
DetailsHide details for curvefinance.pro
- Domain
- curvefinance.pro
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-02 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · curvefinance.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.85.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:55822606:4700:3031::ac43:ce2d
- Cloudflare
- Cloudflare (104.21.85.130, 172.67.206.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.online US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskCloudflare
DetailsHide details for curvefinance.online
- Domain
- curvefinance.online
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-08-01 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · curvefinance.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.89.227 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a5bc2606:4700:3037::6815:59e3
- Cloudflare
- Cloudflare (104.21.89.227, 172.67.165.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.shop US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskCloudflare
DetailsHide details for curvefinance.shop
- Domain
- curvefinance.shop
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- Registered
- 2026-07-30 · Dynadot Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · curvefinance.shop · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.92.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.201.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:5cf92606:4700:3037::ac43:c9b4
- Cloudflare
- Cloudflare (104.21.92.249, 172.67.201.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.claims US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”Listed by MetaMaskCloudflare
DetailsHide details for curvefinance.claims
- Domain
- curvefinance.claims
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .claims zone file, already registered
- Registered
- 2026-06-12 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · curvefinance.claims · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.80.208 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:99d12606:4700:3033::6815:50d0
- Cloudflare
- Cloudflare (104.21.80.208, 172.67.153.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefi.bet DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “curvefi”5 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityHetzner +1
DetailsHide details for curvefi.bet
- Domain
- curvefi.bet
- Match
- A domain containing “curvefi”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .bet zone file, already registered
- Registered
- 2026-06-10 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 46.62.237.138 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.161.230.87 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.161.47.86 (curvefi.bet resolved to it 2026-11-04 23:32 UTC), 5.78.156.59 (curvefi.bet resolved to it 2026-11-04 23:32 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:5506:c09c:e9b:11b32a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e242a05:d018:1d22:801:a216:a799:8c87:df21
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.org NL · AS49981 · WorldStream WorldStream B.V.2 addressesContains “curvefinance”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityNamecheap
DetailsHide details for curvefinance.org
- Domain
- curvefinance.org
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2020-10-02 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · curvefinance.org resolved to it 2026-11-04 23:32 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve-finance.icu US · AS13335 · Cloudflare, Inc.4 addressesContains “curve-finance”PhishDestroy CommunitySuspicious · highRegistry lookup queuedCloudflare
DetailsHide details for curve-finance.icu
- Domain
- curve-finance.icu
- Match
- A domain containing “curve-finance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.60.36 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.191.34 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:bf222606:4700:3035::6815:3c24
- Cloudflare
- Cloudflare (104.21.60.36, 172.67.191.34): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curvefinance.cloud US · AS13335 · Cloudflare, Inc.4 addressesContains “curvefinance”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for curvefinance.cloud
- Domain
- curvefinance.cloud
- Match
- A domain containing “curvefinance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-08-03 · Dynadot, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.71.76 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.231 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:474c2606:4700:3036::ac43:8fe7
- Cloudflare
- Cloudflare (104.21.71.76, 172.67.143.231): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- curve-finance.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “curve-finance”PhishDestroy CommunitySuspicious · mediumParking page · Afternic
DetailsHide details for curve-finance.xyz
- Domain
- curve-finance.xyz
- Match
- A domain containing “curve-finance”, one of the names we match for Curve Finance
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-02-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates curve-finance.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC

