my[.]exoplixogain[.]com

The domain my.exoplixogain.com is a confirmed phishing site engaged in brand impersonation targeting users of the financial service 'curve'. This site poses an elevated risk by presenting itself as a legitimate platform to deceive victims into disclosing sensitive login credentials or personal information. No crypto drainer kit was detected. As of the latest verification, my.exoplixogain.com has been taken offline.

Technical analysis reveals that my.exoplixogain.com was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. The domain appears on 1 security blocklist, specifically PhishDestroy. Registered through OwnRegistrar, Inc. on July 30, 2025, the domain resolves to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the US. No SSL certificate was issued, and the observed page title reads 'Exoplixogain – Exoplixogain provides better, simpler, and more profitable strategies to help you achieve financial success and long-term security'. Nameservers associated with the domain are dns1.webproserver.com and dns2.webproserver.com.

Individuals who interacted with my.exoplixogain.com should immediately change any passwords used on the site, particularly for their 'curve' account, and enable two-factor authentication if available. Monitor financial accounts for unauthorized transactions and report any suspected fraud to the impersonated brand's official support channels. Victims may also report the phishing domain to their local cybercrime authority or platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.