connect-plasma[.]com

The domain connect-plasma.com was registered on September 26, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is presently taken offline. The site presented a page title of "Plasma" and was identified as a crypto‑related brand impersonation campaign targeting Metamask, classified as a Crypto Scam. Security telemetry indicates that 13 of 93 antivirus and URL scanning engines on VirusTotal flagged the domain, reflecting a moderate detection rate among the available vendors. The site was listed on four independent blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, reinforcing its malicious reputation.

An independent trust assessment by Gridinsoft assigned a score of 0 out of 100, indicating a lack of perceived legitimacy. The TLS certificate associated with the domain is labeled "WE1," though no further certificate details are disclosed. No IP address or hosting infrastructure information is available in the current intelligence set. For defensive teams, the immediate recommendation is to ensure the domain is blocked at network perimeter devices, DNS resolvers, and endpoint security solutions.

Existing blocklist entries should be incorporated into internal threat feeds, and detection signatures should be updated to flag any future resolution of the domain or its sub‑domains. Continuous monitoring for re‑registration attempts or the emergence of similarly crafted domains targeting Metamask users is advised, as the underlying phishing kit may be repurposed. Given the high risk rating and the confirmed impersonation of a cryptocurrency wallet brand, organizations should also consider user awareness campaigns focused on Metamask phishing vectors to reduce the likelihood of credential compromise.