[Warning]: Scam/Phishing Curve Website

[TravelMug]

What happened:  Scam/Phishing Curve Website

Website:

Code:

https://curves-fi.org/

Archived: https://web.archive.org/save/https://curves-fi.org/



Whois Information:

Code:

Dates	10 days old
Created on 2023-11-02
Expires on 2024-11-02
Updated on 2023-11-07	Whois History  
Name Servers	IAN.NS.CLOUDFLARE.COM (has 25,663,521 domains)
MEG.NS.CLOUDFLARE.COM (has 25,663,521 domains)
  
IP Address	104.21.96.53 - 853 other sites hosted on this server
  
IP Location	United States - California - San Jose - Cloudflare Inc.
ASN	United States AS13335 CLOUDFLARENET, US (registered Jul 14, 2010)
Domain Status	Registered And No Website
IP History	2 changes on 2 unique IP addresses over 0 years	  
Hosting History	1 change on 2 unique name servers over 0 year	  
Whois Record ( last updated on 2023-11-12 )

Original site: https://curve.fi/

Again, I think by now you know that drill with this fake websites. Help me report them ASAP and hopefully they will be taken down.

So Curve is now their target, maybe next week it will be a different website that they are going to copy and then wait for someone to fall for it.

[robelneo]

The site is now blocked which is good there is now a warning so they have no chance to scam now, but make no mistake about it they will take down the site create another one tweak the same script, and all of this only costs $50 to $100 it's an easy business for scammers they only need a few gullible investors to make profit before they are caught, until domain registrar create a manual checking on sites like this, or until newbies are guided on how to protect themselves, this scheme will continue.

[JollyGood]

What happened:  Scam/Phishing Curve Website

If access to the site is permanently blocked it means this is a success because of the efforts on your part. If the scammers keep getting shut down (because of fast action taken by people such as yourself), it will not be enough to stop them but it will cause enough inconvenience as they keep finding new domains to duplicate the scam on.

or until newbies are guided on how to protect themselves, this scheme will continue.

We have to assume newbies are the most gullible of forum members therefore I suppose we will have to keep posting about scams as and when we find them otherwise some users could lose small fortunes believing the scammers story.

[PX-Z]

What happened:  Scam/Phishing Curve Website

If access to the site is permanently blocked it means this is a success because of the efforts on your part.

The hosting service (namecheap) already take down the website upon visiting it. Namecheap really has good and fast support to take down phishing websites knowing scammers usually use their service due to cheap/discounted hosting and domains.

[albon]

The hosting service (namecheap) already take down the website upon visiting it. Namecheap really has good and fast support to take down phishing websites knowing scammers usually use their service due to cheap/discounted hosting and domains.

When they deal with complaints and reports, they take positive and stringent steps to take down phishing domains. This is because the persistence of hosting these phishing domains can harm their reputation and also go against their policies. I have previously submitted complaints and reports to the domain registrar NameCheap, and their dedicated team reviewed the complaints I submitted in less than 24 hours, closing down several domains. The positive aspect is that anyone can contribute, no matter how simple the action, to disrupt the schemes of scammers. This is what makes the cryptocurrency community secure. Despite the simplicity of the idea behind these phishing domains, beginners may not notice the phishing link, mistakenly thinking it's the official domain of the project, becoming victims. The reason for the spread of these schemes is that they remain a cost-effective method for defrauding beginners.

[PX-Z]

I have previously submitted complaints and reports to the domain registrar NameCheap, and their dedicated team reviewed the complaints I submitted in less than 24 hours, closing down several domains.

That's true based in my experience of many reports i have submitted to them.
While on the other hand, google ad phishing/scam website on google search page is different which is where most phishing/scam sites can be seen. That's why its good to report the site directly on their hosting service for immediate action.

[Yamane_Keto]

I think, with the development of artificial intelligence, the task of finding and closing phishing links will be easy, and browsers may offer it as a free service, and increasing awareness will lead to the end of such fraud. I reported it even though I thought the site's design would create suspicions that it was a scam.

The site is now blocked which is good there is now a warning so they have no chance to scam now,

they blocked by MetaMask only

[348Judah]

Maybe if we are going to look at how people are getting scammed these days, most of them were victims associated to looking after getting airdrops reward but at the cause ended up being scammed, we need to make adequate research about any platform we are applying for, also we should know that more people are getting interest in participating for airdrops reward because they think that there lies opportunities in them over time, thesame way the scammers make use of this same avenue to launch their various attacks, we need to take heed while seeking after airdrops.

[JollyGood]

If Namecheap keep up this type of rapid response they will be making a good reputation for themselves considering there is an ongoing battle between scammers and domain registrars/hosting companies.

When they revoke access to a domain or to a hosting package, the scammers simply set up a new one but duplicating the same website and the hosting company or domain registrar has to go through the process of closing it down yet again. And on it goes.

The hosting service (namecheap) already take down the website upon visiting it. Namecheap really has good and fast support to take down phishing websites knowing scammers usually use their service due to cheap/discounted hosting and domains.

[joniboini]

thesame way the scammers make use of this same avenue to launch their various attacks, we need to take heed while seeking after airdrops.

Unfortunately, some people never learn, sometimes the expert also fails to notice such an obvious scam. While it is the best protection, domain registrars should also improve their filtering method if that is possible. At least Namecheap improves their response time so they can take down domains like this asap, although scammers can easily move to other friendly hosting for their purpose. Personally, I use DNS encryption with a phishing block list to help avoid websites like this.

[Baofeng]

thesame way the scammers make use of this same avenue to launch their various attacks, we need to take heed while seeking after airdrops.

Unfortunately, some people never learn, sometimes the expert also fails to notice such an obvious scam. While it is the best protection, domain registrars should also improve their filtering method if that is possible. At least Namecheap improves their response time so they can take down domains like this asap, although scammers can easily move to other friendly hosting for their purpose. Personally, I use DNS encryption with a phishing block list to help avoid websites like this.

It will take a lot of effort for this domain registrar to put a website under them. As far as my experience goes, most of them response time is quite disappointing, others never replies, why there are companies who are just bouncing off with their supposedly email address that I think they are doing it intentionally.

Namecheap is one of the domain registar that replies so fast. However, it might take a toll on their business models. So I guess it boils down on ethics, if the business owners are going to take down this scam sites or continue as they are making money out of it.

And this cycle will go on, taken down and in matter of days, the scammers are going to just recycle and look for new websites. But at least someone in our community are still active enough to chase this scam websites and report it here.

[tabas]

I tried to do some google search if it's going to appear but then it seems that there's no result. That's actually good if they are not showing if someone search the real curve fi. I'd advise to include the report link from google for your convenience OP with your other scam accusations for ease and everyone's help.

Code:

https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[Gladitorcomeback]

Site is already down or moved to other server. The domain is quite new and I hope no scam would be done. Hackers will make new sites and we couldn't stop it. he will create 10 more If he success to steal one wallet fund. I used Curve to complete the Layer3 task to get XP and your provided screenshot is totally match with real site and it's very difficult to detect phising in first look. bookmarking real sites is very important to be avoid from getting scam. We should also double check the real site before connecting (usually I do).

[ScamViruS]

The website is down which is good news so that more new crypto users are safe from this scam. In fact, when these scammers create fake websites targeting one project, they create multiple websites so that when one is down, another one is used to continue their scam mission.

Scammers try their best to confuse and trap crypto users. So it is important to try to read the minds of the scammers, so that the next time you see such a fake website, you will know that it is a fake website.

[pinggoki]

That's true based in my experience of many reports i have submitted to them.
While on the other hand, google ad phishing/scam website on google search page is different which is where most phishing/scam sites can be seen. That's why its good to report the site directly on their hosting service for immediate action.

How can I report on the domain hosts directly? Do I need to create an account there to do a report or is it the same thing as reporting with Google where there is no need to log in to do a report, I like my anonymity kept to some degree when I do this kind of stuff, it's a hassle for me to take the extra step so you have to forgive me on that part.

Site is already down or moved to other server. The domain is quite new and I hope no scam would be done. Hackers will make new sites and we couldn't stop it. he will create 10 more If he success to steal one wallet fund. I used Curve to complete the Layer3 task to get XP and your provided screenshot is totally match with real site and it's very difficult to detect phising in first look. bookmarking real sites is very important to be avoid from getting scam. We should also double check the real site before connecting (usually I do).

That just means that this discussion board will never run out of threads and the scambusters would never lose their jobs although I do get your concern about the scammers just creating more clone of this like the mythical hydra, I just hope that more and more people learn how to identify scams everyday because when there's less gullible people that are falling for these scams then the more it is that scammers will be discouraged to create this websites.

[PX-Z]

How can I report on the domain hosts directly? Do I need to create an account there to do a report or is it the same thing as reporting with Google where there is no need to log in to do a report, I like my anonymity kept to some degree when I do this kind of stuff, it's a hassle for me to take the extra step so you have to forgive me on that part.

First you need to know the domain's registrar/host, you can find it on whois^[1].
Usually scammers use namecheap, to report them you can just go to their report page^[2] and select "Abuse reports" then you can choose different options together with phishing, scam etc.
If the registrar/host is different, you can just google using this keyword "registrar_name  abuse report" say "godaddy abuse report" or "hostinger abuse report", google with show it's support center or contact page where you can submit and file the report. Usually you only need an email, either its a temp email or not, but using gmail or reputed mail services is recommended then include even a short explanation why the domain is scam.

[1] https://www.whois.com
[2] https://support.namecheap.com/index.php?/Tickets/Submit

[pinggoki]

~

First you need to know the domain's registrar/host, you can find it on whois^[1].
Usually scammers use namecheap, to report them you can just go to their report page^[2] and select "Abuse reports" then you can choose different options together with phishing, scam etc.
If the registrar/host is different, you can just google using this keyword "registrar_name  abuse report" say "godaddy abuse report" or "hostinger abuse report", google with show it's support center or contact page where you can submit and file the report. Usually you only need an email, either its a temp email or not, but using gmail or reputed mail services is recommended then include even a short explanation why the domain is scam.

[1] https://www.whois.com
[2] https://support.namecheap.com/index.php?/Tickets/Submit

I guess I'll have to stick with Google reports, I don't think that Namecheap support ticket is for me, I can't really make up an email address and I don't like using my personal email address for this kind of stuff, a big help nonetheless for replying for an answer, maybe the diversity of the report in different support sites is much more helpful to the removal of this scam websites.

[PX-Z]

I guess I'll have to stick with Google reports, I don't think that Namecheap support ticket is for me

Note that reporting scam/phishing sites to google will only disappeared in google search page, but it will still show on other search engine like duckduckgo, bing, yahoo, yandex etc. since the domain and its hosting is still up unlike reporting it directly to its registrar/hosting.
Well, you can report the scam/phishing site to other search engines too, but it will take your time to do it.