Protocol-impersonator domain registered (typosquat)
Convex Finance's assessment for RD-F-161 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Applicable. Convex Finance is a high-recognition DeFi brand (Curve Wars era, $613M TVL, convexfinance.com domain). Process-learnings: WHOIS/domain-registration lookups are a repeatable tool gap — production pipeline needs DomainTools API or similar. Web searches for specific typosquat domains targeting convexfinance.com returned no specific confirmed typosquat in 2024-2026. Registration-date-to-assessment-date delta: cannot compute without WHOIS access (tool gap acknowledged). Structural prior: base rate for lookalike-domain registration against top DeFi brands is high — Zscaler ThreatLabz found ~33% of 30,000 lookalike domains across top brands are malicious (Feb-Jul 2024 study period). Per process-learnings: for top-20 DeFi brands by recognition, F161 is almost always elevated. Yellow: structurally elevated risk, unconfirmed specific active domain, WHOIS tool gap explicitly acknowledged.
Sources #
- URLPhishing Typosquatting and Brand Impersonation Trends — Zscaler ThreatLabzZscaler ThreatLabz — phishing typosquatting and brand impersonation trends; ~33% of lookalike domains maliciousretrieved 2026-05-16
- Convex Finance — Official WebsiteConvex Finance official domain — convexfinance.comretrieved 2026-05-16
Methodology #
Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.
See the full factor methodology and distribution across all protocols →