plume-registers[.]xyz

plume-registers.xyz was registered on 21 February 2026 and currently resolves to 104.21.79.114, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site presents the page title “Plume | The public blockchain for scaling RWAs”, which aligns with the declared scam type of a crypto‑related fraud. The TLS certificate is identified as “WE1”, indicating a valid HTTPS connection but offering no indication of legitimate ownership. On the day of analysis (24 July 2026) the domain is listed as offline, yet it remains indexed by two independent block‑list providers, PhishDestroy and ScamSniffer, confirming prior detection as malicious.

VirusTotal records show that 12 of 95 scanning engines have flagged the domain, reinforcing the suspicion. Additional reputation metrics are extremely negative: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on two security blocklists. No evidence of the actual landing page content has been captured; the only concrete artifact is the page title and the associated metadata.

Consequently, the confidence level for a crypto‑scam attribution is elevated. Defensive operators should block resolution of 104.21.79.114 for any internal client, add plume‑registers.xyz to DNS‑based deny lists, and monitor Cloudflare‑hosted IP ranges for similar newly‑registered domains. Continuous re‑scanning on VirusTotal and periodic checks against block‑list feeds are recommended to capture any re‑activation attempts.