puroletor[.]com-paysn[.]cc

The domain puroletor.com-paysn.cc was registered on September 10, 2025 through Gname.com Pte. Ltd. and is currently active. Infrastructure analysis shows that the domain resolves to the IP address 104.21.31.140, which is the sole hosting endpoint observed for this campaign. Reputation services provide convergent evidence of malicious intent: Google Safe Browsing flags the domain for social engineering, and it appears on one public security blocklist.

VirusTotal scans have resulted in 13 of 91 security vendors marking the domain as malicious, indicating a moderate level of detection consensus among anti‑malware products. The domain is also listed on the PhishDestroy blocklist, reinforcing its classification as a phishing infrastructure. No additional technical artifacts such as SSL certificate details, HTTP response codes, or page titles have been published, leaving the content of the site unexamined.

The combination of registrar information, hosting IP, and multiple independent detections supports a high‑risk rating. Defenders should prioritize blocking puroletor.com-paysn.cc at DNS and proxy layers, add the associated IP 104.21.31.140 to network‑level deny lists, and monitor for any future resolution changes. Ongoing surveillance of the registrar Gname.com Pte. Ltd. for related registrations is advisable, as is periodic re‑scanning of the domain to capture any evolution in payload or hosting infrastructure.