registration-plasma[.]to

registration-plasma.to was registered through Namecheap on 21 February 2026. The domain resolves to the IP address 23.111.160.242, which belongs to AS29802 HiveVelocity, Inc. and is geolocated in the United States. The authoritative name servers dns101.registrar-servers.com and dns102.registrar-servers.com are correctly delegated. An SSL certificate with an R10 rating is present, indicating a low trust level, and the associated Gridinsoft trust score is 0 out of 100.

HTTP requests to the host return a 200 status code, but the service has since been taken offline, as reflected in the current status flag. Reputation data show that the domain appears on two independent security blocklists and is actively blocked by PhishDestroy and ScamSniffer. VirusTotal analysis reports that 2 of 93 scanning engines have flagged the domain, confirming malicious intent. No additional public indicators such as page titles, brand targeting, or specific phishing kits have been disclosed, leaving the exact content of the site unknown.

Given the combination of a fresh registration, low trust scores, active blocklist listings, and confirmed vendor detections, defenders should treat registration‑plasma.to as a malicious phishing infrastructure. Recommended actions include adding the domain and its resolved IP address to network deny lists, monitoring for any re‑appearance of the host, and updating email gateway and web‑filter policies to block traffic to the domain. Continuous observation of the associated ASN and any future DNS changes is advised to detect potential resurgence.