clover[.]circleisv[.]com
“Circle Payment - Clover onboarding”
Сводка доказательств
The domain clover.circleisv.com is a generic phishing site that was active and posed an elevated risk of credential theft, specifically targeting users through a romance scam. It did not impersonate a known brand or employ a crypto drainer kit. The site has since been taken offline, but its activity was confirmed as malicious by multiple security sources.
Technical analysis shows clover.circleisv.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar. It appeared on 3 security blocklists (PhishDestroy, MetaMask, and SEAL) but was not flagged by Google Safe Browsing. The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to the IP address 35.205.106.218, hosted on Google LLC’s AS396982 in Belgium. The SSL certificate was issued by Let’s Encrypt (R12), and the observed page title was 'Circle Payment - Clover onboarding'. Detected technologies included Tally and HSTS, while Gridinsoft assigned it a trust score of 0/100. Nameservers were ns65.domaincontrol.com and ns66.domaincontrol.com.
Users who interacted with clover.circleisv.com should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or communications. Report the domain to local cybercrime authorities, Google Safe Browsing, and platforms like PhishTank or the Anti-Phishing Working Group. If financial or personal data was shared, consider placing a fraud alert on credit reports and reviewing account activity for signs of misuse.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260216-D4D108- Заголовок сохранённой страницы
- Circle Payment - Clover onboarding
- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Section 3.1 of the Acceptable Use Policy: The domain clover.circleisv.com is engaged in phishing activities, which constitute illegal activities and deception aimed at defrauding individuals.
Section 5 of the Terms of Service: The hosting provider reserves the right to suspend or terminate services for any violations, including those related to fraudulent activities, which are clearly applicable in this case.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which encompasses phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law addresses schemes to defraud individuals using electronic communications, including phishing.
CAN-SPAM Act: This act regulates commercial email and prohibits deceptive practices in email marketing, which is often a method used in phishing attacks.
Regulatory Note: Failure to act on this report may result in legal repercussions and potential liability for facilitating fraudulent activities. Immediate action is required to mitigate risks and comply with applicable laws.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 11.08.2026
8 внешних источников под наблюдением Совпадений нет
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Registration: circleisv.com
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain circleisv.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Анализ производительности сайта
Google PageSpeed Insights — mobile performance audit of clover.circleisv.com · checked Mar 2, 2026
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание