# Phishing sites impersonating Curve PhishDestroy has recorded 154 phishing domains impersonating Curve since 2025-07-16, 39 of them in the last 30 days. The most used registrars are NICENIC and NiceNIC; the most common TLDs are .com and .xyz. The official Curve domain is curve.fi: any other site asking for your login or wallet is not Curve. 154Domains, all time 39Last 30 days 69Online at last check 20Confirmed takedowns ## New domains in the last 90 days Curve phishing domains detected per day: 60 from 2026-07-25 to 2026-10-22; peak 18. ## How to tell a fake Curve site Official domain: curve.fi. Words most often added to the brand in reported domains: embercurve, finance, typedream, lite, swap, curvefinance, crates, distributions, api, curvefi. - Type the address yourself or use a bookmark; phishing links for Curve arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Curve will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Curve phishing domains The 50 most recently detected domains impersonating Curve Domain | First detected | Status at last check | Registrar | [dashboard-curve.app](https://phishdestroy.io/domain/dashboard-curve.app/) | 2026-10-20 | Online | NICENIC | [curve-finances.com](https://phishdestroy.io/domain/curve-finances.com/) | 2026-10-14 | Offline | NICENIC | [embercurvegovernances.xyz](https://phishdestroy.io/domain/embercurvegovernances.xyz/) | 2026-10-13 | Online | NICENIC | [embercurvegovernance.xyz](https://phishdestroy.io/domain/embercurvegovernance.xyz/) | 2026-10-13 | Online | NICENIC | [embercurve.sbs](https://phishdestroy.io/domain/embercurve.sbs/) | 2026-10-13 | Online | NICENIC | [distributions-embercurve.xyz](https://phishdestroy.io/domain/distributions-embercurve.xyz/) | 2026-10-13 | Online | NICENIC | [embercurvedashboards.xyz](https://phishdestroy.io/domain/embercurvedashboards.xyz/) | 2026-10-13 | Online | NICENIC | [embercurve-dashboards.xyz](https://phishdestroy.io/domain/embercurve-dashboards.xyz/) | 2026-10-13 | Online | NICENIC | [dashboard-embercurve.xyz](https://phishdestroy.io/domain/dashboard-embercurve.xyz/) | 2026-10-13 | Online | NICENIC | [dashboards-embercurve.xyz](https://phishdestroy.io/domain/dashboards-embercurve.xyz/) | 2026-10-13 | Online | NICENIC | [curvewojak.space](https://phishdestroy.io/domain/curvewojak.space/) | 2026-10-13 | Online | NameSilo | [rewards-embercurve.fun](https://phishdestroy.io/domain/rewards-embercurve.fun/) | 2026-10-13 | Online | NICENIC | [reward-embercurve.fun](https://phishdestroy.io/domain/reward-embercurve.fun/) | 2026-10-13 | Online | NICENIC | [hedrser.net](https://phishdestroy.io/domain/hedrser.net/) | 2026-10-09 | Offline | Dominet (HK) | [babesstyle.shop](https://phishdestroy.io/domain/babesstyle.shop/) | 2026-10-09 | Online | Dynadot | [embercurvelaunch.xyz](https://phishdestroy.io/domain/embercurvelaunch.xyz/) | 2026-10-07 | Online | NICENIC | [distributions-take-embercurve.xyz](https://phishdestroy.io/domain/distributions-take-embercurve.xyz/) | 2026-10-07 | Unknown | NICENIC | [distribution-take-embercurve.xyz](https://phishdestroy.io/domain/distribution-take-embercurve.xyz/) | 2026-10-07 | Unknown | NICENIC | [stake-embercurve.xyz](https://phishdestroy.io/domain/stake-embercurve.xyz/) | 2026-10-07 | Online | NICENIC | [embercurvestakes.xyz](https://phishdestroy.io/domain/embercurvestakes.xyz/) | 2026-10-07 | Online | NICENIC | [embercurve-launchs.xyz](https://phishdestroy.io/domain/embercurve-launchs.xyz/) | 2026-10-07 | Online | NICENIC | [embercurve-embercurve.xyz](https://phishdestroy.io/domain/embercurve-embercurve.xyz/) | 2026-10-07 | Unknown | NICENIC | [embercurve-launch.xyz](https://phishdestroy.io/domain/embercurve-launch.xyz/) | 2026-10-07 | Online | NICENIC | [distribution-crates-embercurve.xyz](https://phishdestroy.io/domain/distribution-crates-embercurve.xyz/) | 2026-10-07 | Unknown | NICENIC | [crates-embercurve-distributions.xyz](https://phishdestroy.io/domain/crates-embercurve-distributions.xyz/) | 2026-10-07 | Unknown | NICENIC | [embercurvestake.xyz](https://phishdestroy.io/domain/embercurvestake.xyz/) | 2026-10-07 | Online | NICENIC | [embercurvesnapshots.xyz](https://phishdestroy.io/domain/embercurvesnapshots.xyz/) | 2026-10-07 | Online | NICENIC | [distribution-embercurve.com](https://phishdestroy.io/domain/distribution-embercurve.com/) | 2026-10-07 | Unknown | NICENIC | [crates-embercurve-distribution.xyz](https://phishdestroy.io/domain/crates-embercurve-distribution.xyz/) | 2026-10-07 | Unknown | NICENIC | [embercurve-stakes.xyz](https://phishdestroy.io/domain/embercurve-stakes.xyz/) | 2026-10-07 | Online | NICENIC | [distributions-crates-embercurve.xyz](https://phishdestroy.io/domain/distributions-crates-embercurve.xyz/) | 2026-10-07 | Unknown | NICENIC | [distributions-embercurve.com](https://phishdestroy.io/domain/distributions-embercurve.com/) | 2026-10-07 | Unknown | NICENIC | [fervorfinances.com](https://phishdestroy.io/domain/fervorfinances.com/) | 2026-10-07 | Online | NameSilo | [oessal.com](https://phishdestroy.io/domain/oessal.com/) | 2026-10-01 | Offline | NameSilo | [altoonacurveonline.shop](https://phishdestroy.io/domain/altoonacurveonline.shop/) | 2026-10-01 | Online | Dynadot | [embercurvedashboard.xyz](https://phishdestroy.io/domain/embercurvedashboard.xyz/) | 2026-09-29 | Unknown | NICENIC | [allocations-embercurve.xyz](https://phishdestroy.io/domain/allocations-embercurve.xyz/) | 2026-09-29 | Offline | Eranet | [proposals-embercurve.fun](https://phishdestroy.io/domain/proposals-embercurve.fun/) | 2026-09-27 | Offline | Eranet | [embercurve-crates.com](https://phishdestroy.io/domain/embercurve-crates.com/) | 2026-09-27 | Online | Dominet (HK) | [embercurves.fun](https://phishdestroy.io/domain/embercurves.fun/) | 2026-09-19 | Online | NICENIC | [curve-finance-info.com](https://phishdestroy.io/domain/curve-finance-info.com/) | 2026-09-19 | Offline | NAMECHEAP | [embercurvereward.xyz](https://phishdestroy.io/domain/embercurvereward.xyz/) | 2026-09-19 | Unknown | NICENIC | [jubjub.meme](https://phishdestroy.io/domain/jubjub.meme/) | 2026-09-17 | Online | Dynadot | [claims-embercurve.fun](https://phishdestroy.io/domain/claims-embercurve.fun/) | 2026-09-14 | Unknown | NICENIC | [oxicurve.info](https://phishdestroy.io/domain/oxicurve.info/) | 2026-09-13 | Online | NameCheap | [curve-flnance.click](https://phishdestroy.io/domain/curve-flnance.click/) | 2026-09-04 | Offline | Dynadot | [vww-curve.finance](https://phishdestroy.io/domain/vww-curve.finance/) | 2026-09-02 | Online | Dynadot | [blop.fun](https://phishdestroy.io/domain/blop.fun/) | 2026-08-24 | Online | NameCheap | [curve-fl.click](https://phishdestroy.io/domain/curve-fl.click/) | 2026-08-23 | Offline | Dynadot | [governance-curvefinance.xyz](https://phishdestroy.io/domain/governance-curvefinance.xyz/) | 2026-08-23 | Online | NICENIC | [All 154 Curve reports](https://phishdestroy.io/domain/?brand=Curve) ## Where they are registered and hosted ### Registrars - [NICENIC](https://phishdestroy.io/registrar/nicenic/)37 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)12 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)8 - Typedream7 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)6 - Cloudflare5 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)5 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)5 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)33 - [.xyz](https://phishdestroy.io/tld/xyz/)32 - [.app](https://phishdestroy.io/tld/app/)14 - [.finance](https://phishdestroy.io/tld/finance/)7 - [.fun](https://phishdestroy.io/tld/fun/)7 - [.dev](https://phishdestroy.io/tld/dev/)5 - [.co](https://phishdestroy.io/tld/co/)5 - [.net](https://phishdestroy.io/tld/net/)5 ### Hosting networks - CLOUDFLARENET, US39 - Cloudflare, Inc.37 - CLOUDFLARENET - Cloudflare, Inc., US22 - AS13335 Cloudflare, Inc.12 - Omegatech LTD8 - AS-HOSTINGER Hostinger International Limited, CY5 - GOOGLE, US2 - AMAZON-02, US2 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Curve; share of all PhishDestroy reports: 0.07%. Canonical: https://phishdestroy.io/brand/curve/