plasma-rewards[.]app

The domain plasma-rewards.app is currently active and identified as a crypto drainer phishing site targeting cryptocurrency users. Analysis indicates the domain is designed to impersonate legitimate reward distribution events, likely associated with the Plasma brand, to deceive victims into connecting wallets and authorizing malicious transactions. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on June 13, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.77.157 and is secured with an SSL certificate issued by Google Trust Services (WE1). The domain has been flagged by 6 of 95 security vendors on VirusTotal and appears on 3 distinct security blocklists. The page title, Plasma — Rewards Distribution Event, further corroborates the impersonation of legitimate reward campaigns. Current status confirms the domain is still active and poses a high risk to users. Immediate mitigation steps include blocking the domain and associated IP at the network perimeter, updating endpoint protection rules to detect and prevent access, and alerting users to the specific threat. Organizations should monitor for connections to 104.21.77.157 and review logs for interactions with plasma-rewards.app. Users are advised to verify the authenticity of reward distribution events through official channels before engaging with any such offers.