spsc-collab[.]fun

On 24 July 2026 the domain spsc-collab.fun was observed as offline. The domain was registered on 6 January 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to 104.21.58.221, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site presented the page title “$SPSC Collaboration programm” and was classified as a crypto‑scam that impersonates the Metamask brand.

The SSL certificate presented (identified as WE1) was valid for the host, indicating HTTPS was available before the takedown. Reputation services show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist, where it was flagged by PhishDestroy. VirusTotal analysis recorded detections by 2 of 93 scanned security vendors, confirming malicious intent. No additional public blocklist entries, Safe Browsing verdicts, or Open Threat Exchange references were supplied.

The combination of a newly created domain, use of a reputable CDN, low trust score, and confirmed detections aligns with typical brand‑impersonation campaigns targeting cryptocurrency users. Defenders should continue to block the domain at perimeter filters, monitor the associated IP 104.21.58.221 for any future abuse, and add the indicator to threat intelligence feeds referencing Metamask impersonation. Given the offline status, remediation actions are limited to prevention of re‑use and awareness of the observed tactics.