v2-curvefinance[.]com

PhishDestroy first observed v2-curvefinance.com on Aug 19, 2026. The hostname explicitly references Curve; stored content metadata identifies the same apparent target. The captured page title is “Curve Finance: Comprehensive 2026 Data Analysis”. Current evidence score: 58/100 (high).

One source contains a positive finding: SEAL. SEAL listed the hostname in the separate external-blocklist snapshot on Aug 19, 2026 at 22:20 UTC. Non-positive and contextual checks: VirusTotal recorded 0 detections among 91 engines on Aug 19, 2026 at 23:31 UTC. Google Safe Browsing returned no flag on Aug 19, 2026 at 23:32 UTC. URLScan completed without a malicious verdict (score 0) on Aug 19, 2026 at 23:08 UTC. The 0/91 VirusTotal snapshot and the positive findings above are conflicting observations from different sources or collection times.

The collector marked the hostname reachable on Aug 19, 2026 at 22:58 UTC, but did not retain the HTTP response code. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Aug 19, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 217.60.195.241. The recorded endpoint location is AE. The stored server header is nginx. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer.

Stored content provides classification context, but only one source contains a positive finding. The target field identifies Curve, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.