plume-bc5[.]pages[.]dev

PhishDestroy analysts are investigating plume-bc5.pages.dev, a domain flagged for generic phishing activity with a specific focus on the Plume Testnet brand. This site appears designed to deceive users seeking to interact with the Plume Testnet platform. The investigation is ongoing, and no specific drainer kit has been identified at this time.

The technical profile of this domain reveals several noteworthy indicators. VirusTotal reports 0 out of 95 security vendors as malicious, meaning the domain has not yet been widely flagged by the security community. The domain was created on August 7, 2024, and is registered through Cloudflare, Inc. It resolves to IP address 188.114.97.3, which is associated with Cloudflare's infrastructure. The SSL certificate is issued by Google Trust Services (WE1). Despite the low VT detection rate, the domain appears on two security blocklists, suggesting some automated systems have identified it as suspicious. Google Safe Browsing status is not mentioned, but the blocklist presence indicates potential risk.

As of the latest check, plume-bc5.pages.dev has been taken offline, which is a positive development. The response actions include monitoring for any reactivation or related domains. Users who may have interacted with this site should remain vigilant and avoid entering any credentials or personal information. The remaining risk is low while offline, but users are advised to verify the legitimacy of any Plume Testnet-related URLs before use. PhishDestroy recommends always double-checking domain names and using official channels for blockchain testnet interactions.