curveswap[.]org

This domain, curveswap.org, is a brand impersonation site designed to trick users into thinking they're interacting with the legitimate Curve platform. It poses as a crypto service called 'Curve Swap' and could be used to steal credentials or funds from unsuspecting visitors. Even though the site is currently offline, its existence highlights the ongoing risk of lookalike domains in the crypto space.

PhishDestroy's analysis shows that curveswap.org was flagged by 3 out of 95 security vendors on VirusTotal, indicating it's a known malicious domain. It was created on March 1, 2026, and resolves to IP address 172.67.186.66. The site's SSL certificate (WE1) and its appearance on one security blocklist further confirm its suspicious nature. The domain's registration date is recent, which is a common tactic for threat actors to avoid detection.

If you visited curveswap.org, do not enter any personal information or connect your crypto wallet. Run a security scan on your device and change any passwords you may have used. Monitor your accounts for unusual activity and consider enabling two-factor authentication. PhishDestroy recommends staying vigilant and always verifying URLs before engaging with crypto platforms.