pulenox[.]com

Analysis of pulenox.com indicates that the domain was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the Cloudflare edge address 104.21.16.1, which is announced by ASN 13335 and geolocated to the United States. The site presented the page title “PULENOX | Open the world of luck and rewards!” and was classified as a social‑media phishing campaign. The TLS certificate (labelled WE1) was active, confirming HTTPS availability at the time of capture.

The domain appears on a single security blocklist and was flagged by the PhishDestroy sinkhole service. VirusTotal recorded a single positive detection out of 93 scanned scanners, indicating at least one vendor identified malicious behaviour. No additional intelligence such as Safe Browsing verdicts, Open Threat Exchange identifiers, or registrar details was provided. The limited detection footprint suggests the campaign was short‑lived or quickly mitigated.

Defenders should add pulenox.com to local deny lists, monitor for any resurgence of the same IP address or associated Cloudflare edge nodes, and ensure that email filters block messages that reference the “luck and rewards” phrasing. Continuous observation of the IP 104.21.16.1 for new hostnames is advisable, as threat actors often reuse Cloudflare resources. Until further evidence emerges, the domain should be treated as a confirmed phishing indicator with elevated risk.