circle-nft[.]com

This domain, circle-nft.com, is an active phishing site designed to steal cryptocurrency by impersonating the legitimate Circle platform. The site presents itself as a portal called "Circle App," tricking users into connecting their wallets or entering sensitive information. Once a user interacts, a crypto drainer script executes, siphoning funds from the connected wallet. This is a common tactic in the crypto space, targeting users who trust well-known brands like Circle.

PhishDestroy's analysis reveals several red flags. The domain was registered on September 7, 2025, through Tucows Domains Inc., a registrar often abused by malicious actors. It resolves to IP 172.67.191.101, which is associated with Cloudflare, providing a layer of anonymity. VirusTotal shows 3 out of 95 security vendors flagging the domain, and it appears on 4 security blocklists. The SSL certificate is issued by Google Trust Services, which is legitimate but does not guarantee the site's safety. These indicators collectively confirm the site's malicious intent.

If you have visited circle-nft.com or interacted with it, take immediate action. Revoke any permissions granted to the site through your wallet settings, transfer remaining funds to a new wallet, and monitor your accounts for suspicious activity. Run a security scan on your device and consider using hardware wallets for future transactions. Always verify URLs before connecting your wallet, and bookmark official sites to avoid typosquatting. For further guidance, consult PhishDestroy's resources or community forums.