plume-foundation-landing[.]pages[.]dev

The domain plume-foundation-landing.pages.dev is an active threat, impersonating a brand associated with an NFT scam. Based on the page title, the site claims to be a landing page for a foundation, but its classification as an NFT scam indicates it is designed to deceive users into connecting cryptocurrency wallets or authorizing malicious transactions, potentially leading to asset theft.

Technical analysis confirms the malicious nature of the site. VirusTotal reports 10 detections out of 95 security vendors, with specific flags from ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, and ESET. The domain is registered through Cloudflare, Inc., and resolves to IP 172.66.44.59 (US, AS13335 Cloudflare, Inc.). It was created on 2026-02-21 and uses an SSL certificate issued by Google Trust Services / WE1. The nameservers are khloe.ns.cloudflare.com and todd.ns.cloudflare.com. The domain is listed on 3 blocklists.

The site is currently reported as DOWN or OFFLINE. Despite this, the risk level remains high, as indicated by a DOM risk score of 10 and a GridinSoft trust rating of 0 out of 100. The combination of high detection rate, recent creation date, and specific scam classification presents a significant threat to users who may encounter the domain.