circle-rewards[.]us

circle-rewards.us is an active high‑risk domain that impersonates the MetaMask brand by presenting a page titled "Claim Your $750 Gift Card" and claiming a fake airdrop. The domain was created on May 25, 2026 and is registered through Cloudflare, Inc., using the nameservers george.ns.cloudflare.com and itzel.ns.cloudflare.com. DNS resolution points to IP address 188.114.96.3, which belongs to Cloudflare, Inc. and is geolocated to Canada. The site serves HTTP 200 responses over HTTP/3 and reports the presence of Cloudflare Browser Insights and standard Cloudflare services. SSL is provided by Google Trust Services / WE1. Reputation data shows the domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal records indicate a single vendor flagged the domain out of 91 scans. Gridinsoft assigns a trust score of 0 / 100. While the page title and scam type (Fake Airdrop) are known, the full content and any credential‑capture mechanisms have not been publicly analysed. Defenders should immediately block circle-rewards.us at perimeter defenses, add it to URL filtering and email security rules, and monitor for any related C2 traffic from the associated Cloudflare IP. Continuous threat‑intel feeds should be consulted for potential reuse of the same infrastructure in other brand‑impersonation campaigns.