puroletor[.]com-payrn[.]cc

Analysis of the domain puroletor.com-payrn.cc indicates a high‑risk phishing infrastructure. The domain was registered on September 10, 2025 through Gname.com Pte. Ltd. and resolves to the IPv4 address 172.67.219.150. Google Safe Browsing classifies the site under social engineering, and PhishDestroy has already blocked it.

The domain appears on a single security blocklist, and 14 of 91 VirusTotal scanners have raised detections, confirming malicious behavior. No additional public metadata such as SSL certificate details, HTTP response codes, or page title is currently available, limiting the depth of content‑level analysis. The limited visibility suggests the operators may be using a temporary hosting provider or a fast‑flux arrangement, but the consistent IP address points to a static endpoint.

Defenders should add puroletor.com‑payrn.cc to network‑level deny lists, enforce DNS sinkholing, and monitor related traffic to 172.67.219.150. Endpoint security solutions that integrate Google Safe Browsing or VirusTotal reputation feeds will automatically flag connections to this host. Because the domain is still active, continuous re‑evaluation is advised to capture any changes in hosting, additional blocklist listings, or escalation of detection rates.