twitter-virtual-curve-ui[.]pages[.]dev

This domain, twitter-virtual-curve-ui.pages.dev, represents a high-risk threat actively impersonating the Curve brand to deploy a crypto drainer. The page title 'VoteToMoon - Fair token launch on Solana' suggests a fake token launch designed to trick users into connecting their wallets, ultimately draining cryptocurrency assets. PhishDestroy categorizes this as brand impersonation with a specific focus on stealing funds through deceptive Solana token promotions.

The technical indicators paint a clear picture of malicious intent. VirusTotal flags the domain with 7 out of 95 security vendors marking it as malicious. It was registered on March 23, 2026, through Cloudflare, Inc., and resolves to IP 188.114.97.3. The domain currently appears on one security blocklist and remains active at the time of analysis. These factors, combined with the low trust score and impersonation of a legitimate DeFi brand, underscore the severity of the threat.

For users who may have encountered this domain, immediate action is required. Do not connect any cryptocurrency wallet or enter any private keys or seed phrases. Revoke any permissions granted to the site via wallet settings. Run a full security scan on your device and monitor your crypto accounts for unauthorized transactions. Always verify token launch URLs through official Curve channels and use PhishDestroy to check domain safety before interacting. If funds were lost, report the incident to local authorities and the blockchain project's security team.