pem-pros[.]com

The domain pem-pros.com is assessed as having an elevated risk level, specifically for credential theft. This domain was registered through Amazon Registrar, Inc. and currently resolves to the IP address 104.26.15.69, which is located in the United States and associated with AS13335 Cloudflare, Inc. The domain was created on October 21, 2025, and is currently offline. VirusTotal reports that 11 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist, including PhishDestroy. The domain lacks an SSL certificate, which is a common indicator of a phishing site, as legitimate services typically use HTTPS to secure user data.

Infrastructure analysis reveals that pem-pros.com was registered through Amazon Registrar, Inc., a reputable registrar, but this does not necessarily indicate benign intent. The domain's IP address is hosted by Cloudflare, Inc., which is often used to mask the true origin of malicious activities. The creation date of October 21, 2025, suggests that this domain is relatively new, which is a common trait of phishing sites. The lack of an SSL certificate and the presence on one security blocklist further corroborate the elevated risk level. The page title 'Pathfinder Exchange Market' may be an attempt to impersonate a legitimate service, drawing users into providing their credentials.

To mitigate the risk of credential theft, users should avoid interacting with pem-pros.com until it is fully vetted and confirmed safe by multiple security sources. Organizations should update their firewall and DNS settings to block this domain and educate employees on the signs of phishing, such as suspicious page titles and the absence of SSL certificates. Regularly monitoring user accounts for unauthorized access and enabling multi-factor authentication (MFA) can also help prevent successful credential theft attacks.