pusulabel1074[.]com

Analysis indicates that the domain pusulabel1074.com was registered on 27 February 2026 via NiceNIC International Group Co., Limited. The authoritative nameservers brit.ns.cloudflare.com and tadeo.ns.cloudflare.com resolve the domain to the Cloudflare edge address 172.67.168.126, which is associated with ASN 13335 (Cloudflare, Inc.) and located in the United States. No TLS certificate was observed, suggesting the site was served over plain HTTP at the time of capture. The HTTP response returned the page title “Just a moment…”, but no further content has been catalogued because the site has been taken offline.

Reputation services provide consistent negative signals. The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. VirusTotal reports that 2 of 93 scanning engines flagged the domain, and the domain is listed on the PhishDestroy blocklist as well as a second unnamed security blocklist, confirming its classification as a phishing‑related resource. The elevated risk rating aligns with these detections.

Uncertainty remains regarding the specific phishing campaign or targeted brand, as the page title does not reveal a victim brand and no additional artifacts have been collected. Defenders should continue to block traffic to 172.67.168.126 when the SNI matches pusulabel1074.com, add the domain to internal URL filtering lists, and monitor for any re‑hosting attempts that might reuse the same nameserver configuration. Ongoing observation of Cloudflare‑hosted IP ranges for similar low‑trust domains is recommended.