plasma-pool[.]to

Analysis of plasma-pool.to shows a domain created on February 21, 2026 and registered through Namecheap. The site served HTTP status 200 and presented the page title "Plasma," but no additional content has been publicly disclosed. Infrastructure inspection reveals that the domain resolves to IP address 23.111.160.242, which belongs to AS29802 Hivevelocity, Inc. in the United States. The hosting name servers are dns101.registrar-servers.com and dns102.registrar-servers.com, both typical of the registrar's default configuration.

Security assessments indicate a Gridinsoft trust score of 0 out of 100 and an SSL certificate classified as R11, suggesting weak or self‑signed encryption. VirusTotal reports that 2 of 93 scanning engines flagged the domain, and the domain appears on two commercial blocklists, specifically PhishDestroy and ScamSniffer. The observed indicators align with the reported scam type of wallet/seed phishing, a method used to harvest cryptocurrency recovery phrases or private keys.

While the page content has not been captured, the combination of a low trust score, minimal TLS assurance, and presence on dedicated anti‑phishing feeds provides sufficient confidence to classify the domain as a malicious phishing infrastructure. Defenders should add plasma-pool.to to local blocklists, enforce deny‑list rules for the associated IP range, and monitor for any future re‑hosting attempts. Continuous feed updates from PhishDestroy and ScamSniffer are recommended to capture any resurgence, and any related traffic should be inspected for credential or seed extraction attempts.