plimp[.]fun

PhishDestroy identifies plimp.fun as an active phishing domain designed to mimic legitimate login portals and harvest user credentials. This domain resolves to IP 104.21.53.17 and is currently under investigation due to its malicious intent. Security teams have blocked access via Maltrail, though VirusTotal currently shows 12 out of 95 antivirus engines flagging it, highlighting the need for continued vigilance. This domain was flagged on April 05, 2026, just days ago, and registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a common registrar for short-lived malicious sites. Its SSL certificate from Let's Encrypt suggests an attempt to appear legitimate, while its inclusion on one security blocklist confirms suspicious activity. Despite low detection rates today, the domain's recent creation and association with known phishing infrastructure warrant caution. If you or someone in your organization visited plimp.fun, disconnect from the network immediately and scan for unauthorized access or credential exposure. Report the domain to your security team and change passwords for any accounts that may have been entered on the site. Monitor financial and personal accounts closely for signs of compromise, as stolen credentials could be leveraged in further attacks. Avoid interacting with this domain entirely—its purpose is deception, and its threat remains active.