claim-pulsex[.]com

On July 22, 2026, analysis of the domain claim-pulsex.com indicates it is being used for a crypto‑scam that impersonates the X.com brand. The domain was registered on September 10, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 172.67.146.240, which belongs to AS13335 Cloudflare, Inc. in the United States. DNS resolution is served by the Cloudflare nameservers jen.ns.cloudflare.com and simon.ns.cloudflare.com. No TLS certificate is presented for the host, meaning HTTPS connections are not available and any HTTP request would be unencrypted.

The page title returned from the server is the generic string "Just a moment...", providing no further context about the content. Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal reports that 2 of 95 security vendors have flagged the domain, and it appears on a single security blocklist. Independent threat‑intelligence service PhishDestroy has also listed the domain as blocked.

The site’s current status is offline, but the combination of brand impersonation, crypto‑scam classification, low trust score, and partial vendor detections suggests that it was actively used to lure victims into fraudulent cryptocurrency transactions. Uncertainties remain regarding the exact payload or phishing flow, as the page content has not been publicly captured. Defenders should continue to block claim-pulsex.com at network perimeter and DNS layers, monitor outbound connections to its resolved IP, and add the domain to internal threat‑intel feeds. Ongoing vigilance is advised for any residual references in compromised browsers or scripts that may still attempt to contact the host.