partnerrewardpulse[.]com

The domain partnerrewardpulse.com was registered on November 25, 2025 through Name SRS AB and is currently taken offline. Infrastructure analysis shows the domain resolves to the IPv6 address 2620:cb:2000::1, which is hosted by Cloudflare (AS13335) in the United States. No TLS certificate is presented, indicating the site does not support HTTPS. The authoritative nameservers are saanvi.ns.cloudflare.com and shane.ns.cloudflare.com, both belonging to Cloudflare's DNS service.

The page title returned by the HTTP service, "RewardPulse | Programmes de fidélisation, stimulation et récompenses," is unrelated to the targeted brand and suggests a loyalty‑program theme, but no further content has been examined. The domain is flagged for brand impersonation of Apple and is classified as a fake airdrop scam. Reputation signals are poor: Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX lists the domain in a single threat‑intel pulse. It appears on two security blocklists, PhishDestroy and ScamSniffer, and VirusTotal reports that three of ninety‑five scanning engines have flagged it as malicious.

These indicators collectively demonstrate a high likelihood that the domain was used to lure victims with a fraudulent Apple‑related airdrop offering. Uncertainty remains regarding the exact payload or phishing pages that may have been served before the site was taken offline, as no page capture or malware sample is available. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists with the observed indicators, and monitor for any resurgence of the same infrastructure, particularly the Cloudflare‑hosted IPv6 address and the associated nameservers. Threat‑intel teams should also correlate any future Apple‑related airdrop complaints with this domain’s registration and hosting details to accelerate detection and response.