cryptofund[.]icu

The domain cryptofund.icu is a phishing site that poses an elevated risk through brand impersonation, specifically targeting the brand curve. The site has been taken offline, but users who encountered it should remain vigilant. 1 of 95 VirusTotal vendors flagged this domain as malicious, and it appears on 1 security blocklist, PhishDestroy. The domain was registered through Global Domain Group LLC on March 22, 2025, and resolves to the IP address 163.61.188.222, located in the US under the AS153568 NEW DHAKA HARDWARE network. The site did not have an SSL certificate, and the page title observed was 'Crypto Fund - Home'.

The technical indicators for cryptofund.icu highlight its suspicious nature. It was detected by only 1 of 95 vendors on VirusTotal, including Forcepoint ThreatSeeker. The domain is registered through Global Domain Group LLC and was created on 2025-03-22 at 15:55:08. It resolves to the IP address 163.61.188.222, which is located in the US. The domain appears on 1 security blocklist, specifically PhishDestroy, and does not have an SSL certificate.

To ensure safety, users who interacted with cryptofund.icu should take immediate action. For those who may have entered their credentials, it is crucial to change passwords, enable two-factor authentication, and monitor accounts for any unauthorized activity. Additionally, users should report the phishing attempt to the impersonated brand, curve, and to their internet service provider. Reporting can help prevent others from falling victim to the same scam.