plirepsijr74[.]com

Analysis of plirepsijr74.com indicates an active phishing infrastructure. The domain returns an HTTP 301 redirect and resolves to the Cloudflare‑owned address 188.114.96.3, located in Canada. Registration data shows the registrant as CNOBIN INFORMATION TECHNOLOGY LIMITED, and the site is protected by a Let’s Encrypt certificate issued to the identifier YE2. The domain is currently listed on PhishDestroy’s blocklist and appears on one additional security blocklist. VirusTotal scans have flagged the domain in 19 of 91 antivirus engines, and AlienVault OTX references the domain in five independent threat pulses. Nameserver resolution points to armfazh.ns.cloudflare.com and nia.ns.cloudflare.com, confirming Cloudflare DNS usage. While the exact payload and page content have not been publicly disclosed, the convergence of redirect behavior, reputable blocklist listings, and multiple vendor detections strongly suggests a phishing campaign. Defenders should block the domain at perimeter firewalls, update URL filtering feeds, and consider sinkholing the associated IP range. Continuous monitoring of the domain’s DNS and certificate changes is recommended to detect any future re‑use or repurposing.