circle[.]en-int[.]com

Analysis of the domain circle.en-int.com confirms it as a wallet/seed phishing site targeting cryptocurrency users. The domain, registered on December 17, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu, resolved to IP 84.32.84.1 (AS47583 Hostinger International Limited, Lithuania) and was hosted on nameservers ns1.dns-parking.com and ns2.dns-parking.com. No SSL certificate was present, increasing the risk of credential interception. The page title 'Circle Swap' suggests a focus on cryptocurrency exchange or wallet services, aligning with the scam type classified as wallet/seed phishing.

Detection data indicates high-risk activity: Google Safe Browsing flagged the domain for social engineering, and 12 of 93 security vendors on VirusTotal detected it as malicious. Gridinsoft assigned a trust score of 0/100, and the domain appears on at least one security blocklist. PhishDestroy has blocked access to the site, which is now offline as of the report date. The absence of an SSL certificate and the use of DNS parking nameservers further support the assessment of malicious infrastructure.

Defenders should treat this domain as confirmed phishing infrastructure. Block the domain and its resolving IP (84.32.84.1) at perimeter security controls. Monitor for related domains registered through the same registrar or hosted on the same ASN, particularly those using similar naming conventions or targeting cryptocurrency users. No additional brand-specific indicators are available from the provided data, but the page title and scam classification suggest a focus on wallet or seed phrase theft.