convexfinance[.]org

This report analyzes the domain convexfinance.org, which impersonates the Curve brand to perpetrate a financial scam. The site title, "Unlock Your Financial Future with Highchss & ConvexFinance," is a phishing lure designed to trick users into believing they are accessing a legitimate DeFi platform. The primary threat is credential theft or cryptocurrency wallet compromise, as the site likely attempts to harvest login credentials or private keys from victims.

Technical analysis reveals the domain was created on 2025-07-03 and registered through Web Commerce Communications Limited. VirusTotal analysis shows 13 out of 95 security vendors flagged the domain as malicious. Detection was reported by alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. The site is present on 2 blocklists. Its SSL certificate is identified as "WE1," and it uses a single nameserver. GridinSoft assigns a trust score of 0 out of 100, and ScamAdviser rates it at 1 out of 100.

The domain is currently offline (status: DOWN/OFFLINE). Based on the low trust scores, multiple vendor detections, and impersonation of a known brand, the risk level is assessed as high. Users should avoid any interaction with this domain and treat it as an active threat even while offline.