en[.]infinitfirms[.]com

The domain en.infinitfirms.com is identified as a brand impersonation threat targeting Curve, a financial services entity. Analysis confirms the domain is currently offline, though prior activity involved fraudulent investment-themed content under the page title 'INFINITFIRM – Infinitfirm Investment.' The threat type is classified as brand impersonation, with an elevated risk level due to its deceptive infrastructure and targeting of a legitimate financial brand. Infrastructure analysis reveals the domain was registered on September 18, 2024, through OwnRegistrar, Inc., and resolves to the IP address 192.3.190.186. Security vendor assessments indicate 3 of 95 VirusTotal engines flagged the domain as malicious. The domain appears on one security blocklist and holds a trust score of 0/100. Detected technologies include WordPress, MySQL, PHP, LiteSpeed, and client-side libraries such as jQuery Migrate and Swiper. The SSL certificate is issued by Let’s Encrypt, a common but not exclusive indicator of legitimate domains. Current status confirms en.infinitfirms.com has been taken offline, though residual risk remains due to its recent registration and prior malicious intent. Organizations are advised to block the domain and its associated IP (192.3.190.186) at the perimeter. Security teams should monitor for related domains registered through OwnRegistrar, Inc., or resolving to the same IP range. End-users should be alerted to the impersonation of Curve and instructed to verify financial communications through official channels only.