whitelisted-plasma[.]com

Analysis of the domain whitelisted-plasma.com indicates it was operational as a generic phishing infrastructure until recently taken offline. Registered on October 3, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain exhibited characteristics consistent with phishing activity. As of July 23, 2026, the domain is flagged by 14 of 95 security vendors on VirusTotal, though this does not confirm a specific brand or service impersonation, as the page title 'Plasma' provides no clear indication of a targeted entity. The domain appears on one security blocklist, specifically PhishDestroy, and holds a Gridinsoft trust score of 0/100, further suggesting malicious intent.

Infrastructure analysis reveals the domain was associated with a WE1 SSL certificate, a low-assurance certificate type often utilized in short-lived phishing campaigns. AlienVault OTX records the domain in one threat intelligence pulse, though the exact nature of the threat remains unverified due to limited public reporting. No additional details regarding hosting providers, IP addresses, or autonomous system numbers (ASNs) are available in the current dataset. Defenders should treat this domain as a confirmed phishing threat based on its detection history, blocklist presence, and trust score.

While the exact content or target of the phishing site is not yet analyzed, the domain's offline status suggests it may no longer pose an active risk. Organizations are advised to monitor for any reactivation or related infrastructure and ensure endpoint protection systems are updated to block access to whitelisted-plasma.com. Further investigation into associated IP ranges or registrant details may yield additional indicators of compromise.