MALICIOUS — CRITICAL
Проверка домена autarchy.net на фишинг и безопасность
autarchy[.]
This domain is currently under investigation but has been flagged for brand impersonation, specifically targeting the Curve brand.
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Доступность
- Последний известный активный · HTTP 302
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
autarchy.net — Последний известный активный (HTTP 302). Олицетворение бренда: Curve; Тип мошенничества: Brand Impersonation. Сводка доказательств: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); PhishDestroy score 72/100. Регистратор: Fewmoretaps OU d/b/a T….
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
This domain is currently under investigation but has been flagged for brand impersonation, specifically targeting the Curve brand. The page title 'Central Finite Curve' suggests a sophisticated attempt to mimic Curve's services, potentially to harvest credentials or deploy a crypto drainer. While the site is now offline, its presence on a security blocklist and in an AlienVault OTX pulse indicates it was actively used in malicious campaigns.
The domain was created on April 28, 2026, and registered through Fewmoretaps OU d/b/a Trustname.com. It resolves to IP 104.21.14.45 and uses an SSL certificate from Google Trust Services / WE1. Despite having zero detections on VirusTotal (0/95), its inclusion in one threat intelligence pulse and one blocklist underscores the stealthy nature of this threat. The combination of a recent creation date and low detection rate highlights the need for proactive monitoring.
To defend against such brand impersonation threats, organizations should implement strict email filtering rules to block domains that mimic legitimate brands, deploy browser isolation for high-risk sites, and educate users to verify URLs carefully. For Curve specifically, users should only access the official website directly and report any suspicious domains to the security team. Regular threat intelligence feeds should be monitored for new impersonation domains, and any confirmed phishing sites should be added to blocklists immediately.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Охват данных12 recorded checks
Данные сетевой безопасности Registrar context
Процесс реагирования на угрозы
Статус в публичных блок-листах
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Доказательства и внешние отчетыIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.