claim-swarms[.]xyz

On July 25, 2026, the domain claim-swarms.xyz was flagged for brand impersonation, specifically targeting the cryptocurrency platform Curve. The domain was created on February 21, 2026, and has since been taken offline. Analysis indicates that the domain was involved in a crypto scam, leveraging the reputation of Curve to deceive potential victims. The domain resolves to the IP address 2606:4700:3031::ac43:8c4b, which is located in the United States and is associated with Cloudflare, Inc. (AS13335).

The domain's SSL certificate is identified as WE1, which may have been used to instill a false sense of security in users. The page title found on the domain is 'Swarms AI - Enterprise Multi-Agent Framework', which does not align with the typical content expected from a Curve-related site, suggesting a misleading front. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, indicating that it has been recognized as a threat by multiple security vendors. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a high level of distrust.

While the domain is currently offline, defenders should remain vigilant as the infrastructure could be reactivated. It is recommended to monitor for any future activity and ensure that security measures are in place to protect users from potential brand impersonation attacks. The exact content and structure of the page have not been analyzed, but the combination of the domain's creation date, IP location, and blocklist appearances provides a strong basis for classifying this domain as a threat. Defenders should also consider educating users about the risks of visiting unverified domains and the importance of verifying URLs before interacting with any web content.