curvrance[.]com

Domain curvance.com was registered on April 15, 2026, and is currently active as a generic phishing domain. It carries an elevated risk rating and shows signs consistent with credential theft operations aimed at collecting sensitive login data under false pretenses.

This domain is hosted on IP 104.168.145.204 and resolves through TUCOWS.COM, CO. with a Let’s Encrypt SSL certificate in place. VirusTotal detections currently stand at 2 out of 95, indicating limited but notable security vendor recognition. The domain is relatively new but has not been blocked by Google Safe Browsing at the time of analysis.

While the classification remains generic rather than tied to a single brand or drainer kit, the combination of recent registration, active hosting, and low vendor detection suggests an evolving threat capable of credential theft. Immediate flagging and domain-level blocking are recommended for enterprise and personal security layers to mitigate potential compromise. The elevated risk classification underscores the need for continuous monitoring as this domain may rapidly expand in malicious use.