curvestack[.]click

Analysis indicates curvestack.click remains active as of July 12 2026 with a creation date of January 15 2026 through registrar Dynadot LLC. The domain resolves to IP address 172.67.148.40 and presents an SSL certificate issued by Google Trust Services. Its page title reads Curvestack | B2B Sales Infrastructure while the domain is explicitly categorized under brand impersonation targeting Curve. Infrastructure analysis reveals listings on two security blocklists along with explicit blocks from PhishDestroy and BLP-Malware. Gridinsoft assigns the domain a trust score of 0 out of 100.

VirusTotal detection stands at 3 out of 95 vendors while AlienVault OTX records the domain across 14 threat intelligence pulses. These indicators collectively support classification as an active impersonation resource rather than a benign or unrelated registration. The mismatch between the displayed page title and the targeted brand Curve suggests deliberate use of misleading content to establish credibility with visitors. No further details on hosting provider or autonomous system are present in the available records.

Defenders should incorporate the IP 172.67.148.40 and the domain itself into blocklists and DNS filtering rules. Continuous monitoring of traffic to the address is warranted given its ongoing status and multi-source detections. Organizations protecting the Curve brand can reference the listed blocklist appearances and OTX pulses for correlation with internal logs. Additional investigation of any observed connections or redirects originating from this domain may reveal related infrastructure for expanded blocking.