# pp-info.com — SUSPICIOUS

> The domain pp-info.com poses as a generic info site but is a novel phishing lure distributing malware. Resolve to 217.160.0.

## Summary
PhishDestroy identifies pp-info.com as an active generic phishing domain currently under investigation for malicious activities. The site’s primary function appears to be deceptive information harvesting, targeting unsuspecting users under the guise of a legitimate portal.

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating a novel threat that has not yet been widely recognized by automated detection systems. Registered through IONOS SE on March 27, 2026, the domain resolves to IP address 217.160.0.167 and utilizes a Sectigo Limited SSL certificate to enhance its perceived legitimacy. Additionally, the domain remains absent from major blocklists and maintains undetermined trust scores across threat intelligence platforms.

Currently classified as active with a risk level of 'under_investigation,' pp-info.com should be treated as a high-consequence threat until further analysis is completed. Users and organizations are strongly advised to block access to the domain at the network level and avoid any interaction to mitigate potential credential theft or malware exposure. Implement DNS filtering solutions and update browser-based blacklists to preemptively block access to 217.160.0.167 and associated subdomains. Immediate reporting of any observed activity to relevant cybersecurity teams or platforms is encouraged to aid in ongoing threat intelligence efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-27 07:06:19
- Registrar: IONOS SE
- IP: 217.160.0.167

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6de3abd8-682f-4898-8a75-a925a7934d61
- PhishDestroy: https://phishdestroy.io/domain/pp-info.com/
- LLM endpoint: https://phishdestroy.io/domain/pp-info.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pp-info.com/
Last updated: 2026-03-28