Scan report · 2 months agoPublic

curve.finance

172.66.43.123AS13335 · US

Submittedhttps://curve.finance/

Landed onhttps://www.curve.finance/dex/ethereum/swap· 2 redirects

Verdict

0 of 7 enginesCleanAutomated

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoBrand impersonation detected

Telegram · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

Infrastructure

IP: 172.66.43.123CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=YE1, O=Let's Encrypt, C=US · expires Oct 30, 2026
Redirects: 2 hops · / → /dex/ethereum/swap

WHOIS

Registrar: MarkMonitor Inc.
Created: Jan 5, 2020
Expires: Jan 5, 2028
Nameservers: major.ns.cloudflare.comkinsley.ns.cloudflare.com

19 malicious13 suspicious

Hashes & fingerprints

Page Hashbecd5616ba5d18df5e0d44c45e60a22ee789242a5b58c022d1dad9213c952e42 Favicon Hashadc5b932bf01dd5f132318b91a9a249405bbf12309c9a31dd16db35521b15234 DOM Hash57a257eb0521f971779cdeb65d648ae37e4c9d299101e02d631095b976b615e0 Screenshot pHash804988eb23ff955e JARM27d27d27d00027d00042d43d00041df04c41293ba84f6efe3a613b22f983e6 JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintA1ED556CF8A0D8A8ABAAF69A136A6390BF1B317D Cert IssuerCN=YE1, O=Let's Encrypt, C=US

Page capture

Live

Title “Swap - Curve” · brand shown: Telegram (low)

Engines

7 · time to verdict

Page

HTTP: 200 · Completed
Title: Swap - Curve
Load: 8.34 s · 84 requests

Stack · 10CloudflareEmotionHSTSHTTP/3Material UIMUI