curve-finance-dao-pools[.]com
“Curve Finance - Decentralized Stablecoin Exchange & Liquidity Protocol”
curve-finance-dao-pools.com — 확인되지 않음. 브랜드 사칭: Curve; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 4/95 (ChainPatrol, CRDF, Fortinet, Gridinsoft); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 65/100. 등록기관: NiceNIC.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain curve-finance-dao-pools.com was registered on October 10, 2025 through NiceNIC International Group Co., Limited and is presently offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served by the Cloudflare nameservers terry.ns.cloudflare.com and ximena.ns.cloudflare.com, and it does not present an SSL/TLS certificate, leaving the connection unencrypted. The public page title returned by the site is "Curve Finance - Decentralized Stablecoin Exchange & Liquidity Protocol," directly referencing the Curve brand and indicating a crypto‑related impersonation campaign.
According to the supplied intelligence, the site is classified as a Crypto Scam and explicitly impersonates Curve. Detection metadata show that four of ninety‑five VirusTotal security vendors flagged the domain as malicious, and it appears on a single external blocklist. The threat has been added to the PhishDestroy blocklist, providing an additional mitigation vector for organizations that consume that feed. Gridinsoft assigns the domain a trust score of 0 out of 100, reinforcing its malicious reputation.
While the domain is no longer reachable, the infrastructure details—particularly the use of Cloudflare’s network and the lack of TLS—remain relevant for attribution and for identifying other potential assets that may share the same hosting configuration. Defenders should ensure that any outbound connections to 188.114.96.3 are blocked or monitored, and that domain‑based filters include curve-finance-dao-pools.com across DNS, web proxy, and email security layers. Monitoring for newly registered domains using the NiceNIC registrar or similar patterns in the naming scheme (e.g., "curve‑finance‑dao‑pools") can help pre‑empt future impersonation attempts. Continuous ingestion of the PhishDestroy and VirusTotal feeds will provide early warning of any re‑appearance of this indicator.
네트워크 보안 인텔리전스 Registrar context
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-19 02:56:00 UTC
포렌식 인텔리전스
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.