allocation-curve[.]xyz

Analysis of the domain allocation-curve.xyz indicates active brand impersonation targeting Curve, a decentralized finance platform. The domain was registered on June 13, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure in Canada. The page title, 'Rewards Allocation Proposal - Curve,' explicitly suggests an attempt to mimic Curve's official communications regarding reward distributions, a common tactic in phishing campaigns aimed at cryptocurrency users. The domain holds a Gridinsoft trust score of 0/100 and appears on three security blocklists, including detection by PhishDestroy, MetaMask, and SEAL. AlienVault OTX records the domain in two threat intelligence pulses, while VirusTotal reports five security vendor detections out of 91. The SSL certificate is issued by Google Trust Services, a legitimate provider, which does not mitigate the domain's malicious intent. Infrastructure analysis reveals the use of Cloudflare and HTTP/3, technologies frequently employed to obscure hosting origins and evade detection. Defenders should treat this domain as high-risk and prioritize blocking it at the network and endpoint levels. Given its recent registration and active status, monitoring for related domains registered through the same registrar or resolving to the same IP may uncover additional threats in this campaign.