my[.]exiplerkas[.]com

The domain my.exiplerkas.com is a phishing site engaged in brand impersonation, specifically targeting users of the financial service 'curve'. This site was designed to deceive victims into believing they were interacting with the legitimate curve platform, potentially leading to credential theft or financial fraud. As of the latest verification, my.exiplerkas.com has been taken offline, though users who may have interacted with it should remain cautious.

Technical analysis reveals that my.exiplerkas.com was flagged by 1 of 95 security vendors on VirusTotal, including Fortinet. The domain was registered through OwnRegistrar, Inc. on August 12, 2025, and resolved to the IP address 192.3.190.187, hosted by AS36352 (HostPapa) in the US. It appeared on 1 security blocklist, PhishDestroy, and had no SSL certificate issued. The observed page title was 'Home - Exiplerkas', and it used nameservers dns1.webproserver.com, dns2.webproserver.com, and null. Google Safe Browsing did not flag the domain, and the Gridinsoft trust score was 0/100.

Users who visited my.exiplerkas.com should immediately change any passwords associated with their curve account and enable two-factor authentication if not already active. Monitor financial statements for unauthorized transactions and report any suspicious activity to curve's official support channels. Additionally, victims can report the phishing domain to their local cybercrime unit or platforms like the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.