suncurve-dex[.]com

This domain is flagged for impersonating legitimate decentralized exchange (DEX) infrastructure to facilitate bridge scams targeting TRON network users. Analysis of the page title, "SunCurve DEX — StableSwap & Cross-Chain Bridge on TRON | Low Slippage · 0.04% Fee," indicates an attempt to mimic authentic platforms by advertising low transaction fees and cross-chain functionality. The domain specifically poses a financial threat by tricking users into authorizing malicious smart contracts or transferring assets to attacker-controlled wallets under the guise of a trusted service.

Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on May 18, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk registrations. It resolves to the IP address 172.67.171.94 and is currently active, with only 1 out of 95 security vendors on VirusTotal flagging it as malicious. The SSL certificate is issued by Let's Encrypt, providing a false sense of security while the domain remains unblocked by most security platforms. These characteristics align with known patterns of bridge scam infrastructure, where attackers prioritize rapid deployment over long-term concealment.

Users who have interacted with suncurve-dex.com should immediately revoke any smart contract approvals associated with the domain using a blockchain explorer or wallet interface. All assets transferred to addresses linked to this domain should be considered compromised. It is recommended to monitor wallet activity for unauthorized transactions and report the domain to relevant security teams for further investigation. If credentials or private keys were entered on the site, users must migrate assets to new wallets and audit all connected devices for malware.