# onlineplanetfirst.com — SUSPICIOUS

> Stay cautious with onlineplanetfirst.com, flagged for phishing. Avoid sharing personal info and ensure links are legitimate before clicking.

## Summary
PhishDestroy has identified onlineplanetfirst.com as a domain associated with generic phishing activities. The domain’s page title, "First Plan Bank," suggests an attempt to impersonate legitimate banking services to deceive users. Classified under low-risk phishing, this domain aims to trick victims into divulging sensitive data without advanced targeting.

Technical analysis reveals that onlineplanetfirst.com was registered on March 4, 2026, via NameSilo, LLC. The domain has been flagged by 2 out of 95 security engines on VirusTotal and appears on one security blocklist. It resolved to IP address 148.72.153.160 at the time of investigation. The relatively low detection rate indicates early-stage or less sophisticated phishing infrastructure.

Currently, onlineplanetfirst.com is taken offline, mitigating immediate threat exposure. PhishDestroy recommends maintaining vigilance as attackers may attempt to reactivate or reuse similar domain names. Users encountering this domain should avoid inputting any personal or financial information and report suspicious links to their security teams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: First Plan Bank

## Domain Intelligence
- Registered: 2026-03-04 21:07:01
- Registrar: NameSilo, LLC
- Country: US
- IP: 148.72.153.160
- IP Country: US
- IP City: St. Louis
- IP Org: AS30083 velia.net
- Nameservers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/xSp7khyM/b234bfff7fd4.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/onlineplanetfirst.com
- PhishDestroy: https://phishdestroy.io/domain/onlineplanetfirst.com/
- LLM endpoint: https://phishdestroy.io/domain/onlineplanetfirst.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onlineplanetfirst.com/
Last updated: 2026-03-19