plasma-vote[.]app

The domain plasma-vote.app is identified as a cryptocurrency phishing site designed to impersonate a legitimate rewards distribution event under the Plasma brand. Analysis indicates the domain is currently offline but was actively used to deceive users into disclosing wallet credentials or transferring digital assets under false pretenses. The page title, 'Plasma — Rewards Distribution Event,' suggests a targeted campaign aimed at cryptocurrency holders seeking to claim fabricated rewards. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 17, 2026, an anomalous future date that may indicate fraudulent registration practices. It resolves to the IP address 188.114.96.3 and is flagged by 3 of 95 security vendors on VirusTotal. The domain appears on three distinct security blocklists and is blocked by multiple cryptocurrency security tools. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the malicious intent of the domain. As of the latest verification, plasma-vote.app has been taken offline, reducing immediate risk to users. However, the infrastructure may be repurposed or re-deployed under a different domain. Organizations and individuals are advised to block the domain and its associated IP at the network level. Cryptocurrency wallet providers should monitor for attempts to interact with this domain and alert users who may have engaged with it. Security teams should review logs for connections to 188.114.96.3 and investigate any related transactions for signs of compromise.