Free website security scanner — Antivirus, regulators, blacklists, scam network detection and technical analysis
Alertoscan iconAlertoscan Team· Apr 30, 2026·ScannedApr 29, 2026
Finance Trading

curpay.io — Security Scan Report

CurPay is a digital asset trading and payment platform that offers automated trading tools (including AI-based volatility protection), forex conversion services, merchant payment solutions, and trader tools for cryptocurrencies and digital assets.

Score Badges How it works →
1Shady Signal3Toxic Cookies1Ghost Owner
44/ 100
Trust Verdict
RISKY
Community

Automated scan powered by Alertoscan's detection engine.

Need Help?

If you were affected by this website, professional assistance is available.

Analysis Summary

Why curpay.io received a 44/100 trust score.

Score Breakdown

1 ISSUE
Malware
Detected

1 threat

Blacklist
Clean

Not listed

Community
Active

User reports

SSL
Valid

Certificate OK

Domain Age
Established

5+ years

Website
Online

Active

Score Evolution

Stable

100

Initial

44

Current

1

Scans

Trust Score history based on security scans

Overall Assessment

What is curpay.io?

Curpay claims to be a digital asset ecosystem powered by Quantum AI and Automated Volatility Protection, presenting itself as a consolidated payment gateway that aggregates global payment methods including cards, e-wallets, bank transfers, and digital assets.

Trust Score

The website scores 44 out of 100, classified as Risky. Negative signals significantly outweigh positive ones. The site shows no positive security badges, while multiple security failures are present.

Threat Intelligence

The domain was flagged by 1 out of 91 antivirus engines on VirusTotal, indicating detection by a tier-1 antivirus provider. While not universally detected, this flags the site as potentially malicious or suspicious. No scam farm links were identified in the scan data.

Infrastructure & Registration

The domain curpay.io is 5 years and 3 months old, suggesting it has been registered for a substantial period. WHOIS privacy protection is enabled, obscuring the domain registrant's identity. The scan data does not provide information about the SSL certificate status, server location, or hosting provider.

Security Issues

Cookie security is critically weak, with zero percent of cookies configured as secure. This creates exposure to session hijacking and data interception. The combination of antivirus detection, insecure cookies, and WHOIS anonymity presents a concerning security profile for a financial platform.

Website Overview

Visual inspection and status of curpay.io.

Preview

LIVE
curpay.io-screenshot

Status

ACTIVE

Active Website

This domain is serving active content and is not parked.

Info

FOUND
Companycurpay.io
Websitecurpay.io logocurpay.io
Keywords
Curpay
EmailN/A
PhoneN/A
AddressN/A

Uptime History 6h ago

100%
May 2026
26
27
28
29
30
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
1
2
3
4
5
6
Event Date, May 2026
Online (22)Offline (0)

Exit Scam Indicator 6h ago

Low

Consecutive days offline

Max Consecutive Offline0 days
Current Streak0 days
Risk LevelLow

Linked Sites

UNIQUE

Unique Codebase

No similar sites found in our database

Threat Intelligence Scan Results

Deep infrastructure scan across 91+ antivirus engines and global blacklists.

Regulatory Apr 29

VERIFIED

No Regulatory Warnings

Verified against 15 financial authorities worldwide.

Antivirus

1 THREAT
SOCRadar
THREAT
90 engines - No threats detected

Blacklist

SAFE

Not Blacklisted

Clear on all checked phishing and malware blacklists.

SSL just now

SECURE
StatusCertificate Expiring Soon
IssuerLet's Encrypt
Certificate TypeDV (Domain Validated)
Valid FromMar 24, 2026
Valid UntilJun 22, 2026
Days Remaining29 days

Technical Details & Domain Information

Registration history, ownership patterns, infrastructure and associated contact information for curpay.io.

Registrar

ESTABLISHED
RegistrarGoDaddy.com, LLC
Domain Age5+ years
CreatedJan 15, 2021
ExpiresJan 15, 2027
Privacy ProtectionEnabled
Name Servers
ns25.domaincontrol.comns26.domaincontrol.com

Server

ASN / ProviderAS8075 / AS8075 Microsoft Corporation
IP Address40.117.254.190
Countryus United States
CityWashington
Server SoftwareMicrosoft-IIS/10.0

Technologies

4 FOUND
Google Analytics
Tailwind CSS
Bootstrap
ASP.NET

Network & Resources Analysis

Traffic patterns, redirects, cookies and resource breakdown for curpay.io.

HTTP Transactions

56 REQUESTS
56
Requests
3.8 MB
Transferred
10
Domains
GET200document/0 B
GET200stylesheet/css?family=Open+Sans:300,300i,400,400i,700,700i|Montserrat:300,400,500,7000 B
GET200stylesheet/fonts/font-awesome-4.7.0/css/font-awesome.min.css0 B
GET200stylesheet/css/animate/animate.min.css0 B
GET200stylesheet/icons/ionicons/css/ionicons.min.css0 B
GET200stylesheet/scripts/owlcarousel/assets/owl.carousel.min.css0 B
GET200stylesheet/css/lightbox/css/lightbox.min.css0 B
GET200script/ajax/libs/jquery/3.3.1/jquery.min.js0 B
GET200script/jquery-migrate-git.min.js0 B
GET200script/bootstrap/4.3.1/js/bootstrap.bundle.min.js0 B
GET200stylesheet/bootstrap/4.3.1/css/bootstrap.min.css0 B
GET200stylesheet/css/stylesheet.css0 B
GET200script/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZC5bL1qmvYLy4MqISJndvalboxfc9mMfYf-nk_262CwCzPAWxgyxiehBL1wwhMD5Fg2&t=6389013922481573320 B
GET200script/Scripts/WebForms/MsAjax/MicrosoftAjax.js0 B
GET200script/Scripts/WebForms/MsAjax/MicrosoftAjaxWebForms.js0 B
GET200script/CPService.svc/js0 B
GET200image/images/CurPayLogoText.png0 B
GET200script/scripts/js.cookie.js0 B
GET200script/git/jquery-migrate-git.min.js0 B
GET200script/scripts/hsclock.js0 B
GET200stylesheet/css/slicknav.css0 B
GET200script/scripts/jquery.slicknav.js0 B
GET200image/images/gatewaytt.png0 B
GET200image/images/fxtrx.png0 B
GET200image/images/avpnew.png0 B
GET200image/images/mert1.png0 B
GET200script/scripts/moment.js0 B
GET200script/scripts/TOS.js0 B
GET200script/scripts/easing/easing.min.js0 B
GET200script/scripts/mobile-nav/mobile-nav.js0 B
GET200script/scripts/wow/wow.min.js0 B
GET200script/scripts/waypoints/waypoints.min.js0 B
GET200script/scripts/owlcarousel/owl.carousel.min.js0 B
GET200script/scripts/isotope/isotope.pkgd.min.js0 B
GET200script/css/lightbox/js/lightbox.min.js0 B
GET200script/scripts/contactform.js0 B
GET200script/scripts/main.js0 B
GET200script/gtag/js?id=UA-32542500-20 B
GET200image/images/trade3333.png0 B
GET200image/images/quantum.png0 B
GET200image/intl/en_us/badges/static/images/badges/en_badge_web_generic.png0 B
GET200font/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff20 B
GET200font/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff20 B
GET200image/images/cpback1.png0 B
GET200font/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff20 B
GET200font/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.00 B
GET200script/gtag/js?id=G-0LSF84QJFY&cx=c&gtm=4e64s0h10 B
GET200script/gtag/js?id=UA-32542500-1&cx=c&gtm=4e64s0h10 B
GET200script/analytics.js0 B
GET200image/td?id=UA-32542500-1&v=3&t=t&pid=986047757&gtm=457e64s0h1za200&seq=1&exp=0~115616986~115938465~115938468~117266400~118463262&dl=curpay.io%2F&tdp=UA-32542500-1;;0;2;0&frm=0&slo=10&hlo=14&lst=3&pcid=_UA-32542500-2&bt=0&ct=3&jsp=11~12&z=00 B
GET200image/css/lightbox/images/prev.png0 B
GET200image/css/lightbox/images/next.png0 B
GET200image/css/lightbox/images/loading.gif0 B
GET200image/css/lightbox/images/close.png0 B
POST200xhr/CPService.svc/GetStats0 B
GET200fetch/images/favicon.png0 B

Page Timing

FAST
1.84 s
Total Page Load
DNS Lookup
1 ms
TCP Connect
246 ms
TLS Handshake
131 ms
TTFB
245 ms
Content Download
3 ms
DOM Content Loaded
1.29 s
Page Load
1.84 s

Network Statistics

CLEAN
56
Requests
100%
HTTPS
0%
IPv6
1
Countries
1
ASNs
0
Links

Redirects

0 REDIRECTS

No redirects detected

Direct access to curpay.io

Resources

3.8 MB
56 requests
image14
3.0 MB
79%
script26
578.0 KB
15%
font4
208.6 KB
5%
stylesheet9
35.4 KB
1%
document1
9.1 KB
0%
fetch1
1.5 KB
0%
xhr1
169.0 B
0%

Cookies

0% SECURE
0
Secure
0
HttpOnly
7
Session
Name Domain Flags Expires
MTcurpay.io
SH
Session
_gid.curpay.io
SH
Session
_gat_gtag_UA_32542500_2.curpay.io
SH
Session
_gat_gtag_UA_32542500_1.curpay.io
SH
Session
_ga_0LSF84QJFY.curpay.io
SH
Session
S = Secure H = HttpOnly
Present Missing N/A

5 analytics cookies (GA, Hotjar...) - HttpOnly N/A is expected

About This Scan

Common questions about the security analysis of curpay.io.

FAQs

How can I verify if curpay.io is legitimate?

To verify curpay.io, start by checking for a physical address and genuine contact information. Search for "curpay.io reviews" on independent sites and verify their business registration in the country they claim to operate from. Look for secure payment options with buyer protection, and be wary of prices that seem too good to be true.

Is curpay.io a scam or legit?

curpay.io is in a caution zone. While not confirmed as a scam, its score of 44/100 indicates concerns that should not be ignored before sharing personal information.

Is it safe to download curpay.io's app?

If curpay.io offers an app, only download it from official app stores like Google Play or the App Store. Check the app's ratings and reviews before installing, and review the requested permissions carefully - be wary of apps asking for excessive access. Make sure the developer name matches the company, and never download APK files from unknown sources.

What does curpay.io's trust score of 44/100 mean?

A score of 44/100 means proceed with caution. While not definitively a scam, there are concerns that warrant careful verification before any transactions or sharing personal data.

Community Reviews

Real feedback from verified users

Community Reports

User-submitted reports help improve scan accuracy and warn others.

User Reviews

No Reviews0 reviews
0.0

0 reviews

5
0
4
0
3
0
2
0
1
0

Sign in to share your experience

All Reviews 0

No Reviews Yet

Be the first to share your experience with curpay.io

Scan Verdict: curpay.io

Curpay.io is a risky financial website that combines antivirus detection, weak cookie security, and registration anonymity, making it unsuitable for handling sensitive payment or financial data without significant investigation.

Proceed with caution. Mixed signals detected.

44/100
Trust Score
RISKY
Verdict