circlend[.]io

Analysis indicates that circlend.io remains an active domain flagged for brand impersonation with a high risk level and a cryptocurrency scam classification. The site targets UPS according to the recorded brand details and carries the page title Circlend. It was registered on December 08 2025 through TLD Registrar Solutions Ltd. and continues to resolve to IP address 82.221.129.24 located in Iceland under AS50613 Advania Island ehf. The domain uses nameservers buffy.ns.orangewebsite.com and siti.ns.orangewebsite.com along with an SSL certificate issued by Let's Encrypt R13. HTTP status returns 200 and the domain appears on one security blocklist while being blocked by PhishDestroy. VirusTotal reports detections from 6 out of 95 vendors and the Gridinsoft trust score stands at 0 out of 100. AlienVault OTX lists the domain in one threat intelligence pulse. Detected technologies include Bootstrap LiteSpeed Slick OWL Carousel metisMenu Modernizr jQuery and Popper. Infrastructure analysis reveals these elements collectively support the high risk assessment for this active domain. The exact content hosted on the domain has not yet been analysed beyond the recorded page title and scam classification so the full scope of the impersonation remains undetermined from available records. Defenders should incorporate the domain IP nameservers and associated registrar details into blocklists and monitoring systems to limit exposure. Continued observation of the listed threat pulses and blocklist entries is warranted given the ongoing active status as of the July 12 2026 report date. Cross referencing the specific nameserver pair and the single security blocklist appearance can help identify any infrastructure reuse in related campaigns without relying on unverified assumptions about the site functionality.