puroletor[.]com-payeo[.]cc

Analysis indicates that the domain puroletor.com-payeo.cc was registered on September 17, 2025 through Gname.com Pte. Ltd. The domain resolves to the IPv4 address 188.114.96.3, which is currently listed on at least one public security blocklist. Multiple threat intelligence sources have flagged the domain: Google Safe Browsing classifies it as a social engineering site, and PhishDestroy has added it to its phishing blocklist. VirusTotal reports that 13 of 91 scanned security vendors have identified malicious activity associated with the domain, reinforcing the suspicion of phishing intent.

The overall risk rating assigned by the reporting framework is high and the operational status is active, indicating that the site is likely still serving malicious content. The available evidence confirms that the domain is being used for generic phishing, though the specific landing page content, SSL certificate details, HTTP response codes, and any hosted payloads have not been publicly disclosed. Consequently, defenders lack visibility into the exact credential‑harvesting techniques employed, but the consistent detection across independent scanners suggests a reliable indicator of compromise.

Defensive recommendations include immediate addition of puroletor.com-payeo.cc to network deny‑list and endpoint block policies, enforcement of URL filtering that references both the IP address 188.114.96.3 and the domain name, and continuous monitoring of outbound traffic for connections to this host. Organizations should also audit authentication logs for any recent credential submissions that might have originated from this domain, and consider prompting affected users to reset passwords. Because the domain is newly created and already flagged by several reputable sources, proactive containment is advised while further forensic analysis of any associated payloads is pursued.