curvance[.]co

Analysis of curvance.co indicates that the domain was registered on February 21, 2026 through OwnRegistrar, Inc. The domain resolves to the authoritative nameservers NS1.PARKCO1.NEUSTAR.BIZ and NS2.PARKCO1.NEUSTAR.BIZ, both typical of bulk‑parking services. The page title returned by the site is identical to the domain name, offering no additional context. Defensive feeds have marked the domain as hostile: PhishDestroy, ScamSniffer and Enkrypt have placed it on blocklists, and it appears on three additional security blocklists. VirusTotal scans show that fifteen of ninety‑three AV engines flag the domain, reinforcing the malicious assessment.

Gridinsoft assigns a trust score of zero out of one hundred, indicating a complete lack of confidence in the site’s legitimacy. The domain has been taken offline, and current checks report an offline HTTP status. No SSL certificate information is available, and no Safe Browsing or OTX entries are present in the provided data. The combination of recent registration, use of parking‑service nameservers, low trust scores, multiple blocklist listings, and detection by a sizeable portion of AV engines points to a generic phishing operation.

However, the exact phishing payload, targeted brand, and victim‑interaction flow remain undocumented, as the page content has not been captured. Defenders should continue to block curvance.co at perimeter filters, add it to internal deny lists, and monitor for any residual host‑header or DNS traffic. Incident response teams should treat any connections to the domain as malicious, isolate affected endpoints, and advise users that any emails containing links to curvance.co are likely fraudulent. Ongoing vigilance is recommended until the domain is fully retired from threat‑intelligence feeds.