mailpulsynk[.]xyz

The domain mailpulsynk.xyz was registered through NameCheap on 2026-05-04. Within two months of creation it was observed by multiple threat‑intelligence sources. VirusTotal analysis shows that 18 of 91 scanned security vendors returned a malicious verdict, indicating a consensus that the site is being used for malicious purposes. The PhishDestroy blocklist has actively blocked the domain, and it is also listed on one additional security blocklist, confirming its presence in community‑maintained deny lists.

No public information on the hosting IP address, autonomous system number, or geographic location has been disclosed in the current dataset, and SSL/TLS certificate details or HTTP response codes have not been published. Likewise, the page title and any Safe Browsing or Open Threat Exchange (OTX) identifiers are absent from the available intelligence. The limited visibility suggests that the infrastructure may be using short‑lived or dynamically provisioned resources, a pattern common to fast‑flux phishing campaigns.

Defenders should immediately add mailpulsynk.xyz to outbound and inbound filtering rules, enforce DNS sink‑hole redirection where possible, and monitor DNS queries for related domains registered through the same registrar. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in the domain’s reputation. Until further forensic evidence is obtained, the domain should be treated as a confirmed phishing site with elevated risk.