plasmaschecks[.]com

The domain plasmaschecks.com was registered on October 08, 2025 and is currently taken offline. DNS interrogation shows it uses the authoritative nameservers ns1-ams.v-sys.org and ns2-ams.v-sys.org. The sole HTTP response captured before the takedown returned the generic page title "Index of /", and no SSL certificate was presented, indicating the site operated only over HTTP. Network resolution points to the IPv4 address 213.111.144.132, which is allocated to AS43641 SOLLUTIUM EU Sp z.o.o.

in the Netherlands. Reputation services flag the host as highly malicious: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one known security blocklist. VirusTotal analysis reports that 3 of 95 scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent.

The domain is listed as blocked by the PhishDestroy mitigation platform, and its registrar is recorded as OwnRegistrar, Inc. While the page content beyond the title has not been publicly released, the combination of a recent creation date, lack of TLS, low trust score, and multiple vendor detections strongly suggests a phishing operation. Defenders should add the domain and its resolving IP to local blocklists, monitor for any resurgence of the host, and ensure that outbound connections to 213.111.144.132 are denied. Continuous re‑query of passive DNS and threat‑intel feeds is recommended to capture any re‑registration attempts or related infrastructure that may emerge.