playfi79[.]net

The domain playfi79.net has been identified as a generic phishing threat. This domain was reportedly used in activities that attempt to deceive users into divulging sensitive information. Although no specific brand or drainer kit is associated with this domain, its classification as a phishing threat suggests malicious intent designed to compromise user security.

Technical analysis of playfi79.net reveals several indicators of compromise. The domain was created on April 24, 2026, and is currently resolving to the IP address 43.251.57.48. The domain was registered through Fewmoretaps OU d/b/a Trustname.com. Notably, the domain's SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of access. VirusTotal reports that 3 out of 95 security vendors flagged this domain as malicious. Furthermore, it appears on 1 security blocklist and is included in a threat intelligence pulse on AlienVault OTX. The domain's Gridinsoft trust score is 0/100, indicating a significant lack of trustworthiness.

The current status of playfi79.net is offline, having been taken down following its detection by PhishDestroy. Despite its offline status, the domain's historical activity poses an elevated risk level, as it could be reactivated or similar domains could be registered. It is recommended that users and organizations continue to monitor for any related activities and ensure robust security measures are in place to mitigate potential phishing threats.