app[.]plasma[.]best

On July 24, 2026, the domain app.plasma.best was flagged as a potential phishing threat. The domain was created on February 21, 2026, and currently resolves to the IP address 104.21.31.243, which is located in the United States and is part of the Cloudflare, Inc. network (AS13335). The site's page title is 'Plasma,' which suggests an attempt to impersonate a legitimate service or brand of the same name. However, the exact content and target of the impersonation have not been analyzed in detail.

Infrastructure analysis reveals that the domain is associated with an SSL certificate identified as WE1, which may provide a false sense of security to unsuspecting visitors. Of the 95 security vendors on VirusTotal, 9 have flagged this domain as malicious, indicating a notable level of suspicion among security professionals. The domain also appears on two security blocklists, specifically PhishDestroy and ScamSniffer. These listings further corroborate the domain's potential involvement in phishing activities.

At the time of the report, the domain has been taken offline, which could be a result of takedown efforts or the cessation of the malicious activity. Despite the domain's offline status, defenders are advised to remain vigilant and block access to this domain in their network configurations to prevent any residual or potential threats. Additionally, ongoing monitoring is recommended to ensure that the domain does not reappear with new malicious content.