washbypro[.]com

Analysis of washbypro.com shows it was registered on February 21, 2026 and is currently taken offline. The site resolves to IP 137.220.48.95, hosted in the United States under ASN AS20473 The Constant Company, LLC. It presents a page title that references VivifyTech and a project management system, but no further content has been captured. The domain is listed on one security blocklist and is explicitly blocked by the PhishDestroy service. Reputation services assign extremely low scores: Scamadviser rates the domain 1 out of 100 and Gridinsoft scores it 0 out of 100, indicating a high likelihood of malicious intent.

VirusTotal analysis records two detections out of ninety‑three scanning engines, reinforcing the suspicion. The SSL certificate in use is the R3 intermediate, commonly associated with Let’s Encrypt, but the certificate does not mitigate the observed risk. The threat is categorized as a crypto scam with a brand impersonation focus on the financial brand Curve, suggesting attempts to lure victims by mimicking legitimate Curve communications.

While the site is offline, the infrastructure details—IP address, ASN, and blocklist presence—remain observable and may be reused in future campaigns. Defenders should ensure the domain is added to local deny lists, monitor DNS queries for the IP address and ASN for reappearance, and maintain vigilance for new domains that target Curve or employ similar page titles. Continuous threat‑intel feeds should be consulted for any resurgence, and any inbound traffic to the listed IP should be blocked at the perimeter.