puotox[.]com

Analysis of puotox.com indicates that the domain was created on 23 July 2026 and is currently active. The domain is delegated to Cloudflare name servers (pearl.ns.cloudflare.com and viddy.ns.cloudflare.com) and resolves to the IP address 172.67.150.192, a Cloudflare‑owned address commonly used for CDN and proxy services. Registration information lists Fewmoretaps OU doing business as Trustname.com as the registrar, which aligns with the recent creation date.

The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocklist, confirming that at least one external threat‑intelligence source classifies it as malicious. VirusTotal has processed the domain with 91 scanning engines; none reported a detection at the time of the scan, but the absence of detections does not constitute a safety assurance. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status, trust‑score, or page‑title data are presently available for puotox.com, leaving those vectors unverified.

Given the limited evidence—recent creation, Cloudflare hosting, blocklist inclusion, and the generic phishing designation—defenders should treat the domain as a high‑confidence phishing indicator. Recommended mitigation steps include adding the domain to perimeter blocklists, updating IDS/IPS signatures to drop traffic to 172.67.150.192 when associated with phishing patterns, and monitoring for any new detections from additional scanning vendors or threat feeds. Continuous re‑evaluation is advised as further intelligence, such as page content or SSL details, becomes available.