adm-pulse[.]com

Analysis of adm-pulse.com confirms its classification as an active credential phishing domain, specifically targeting users of a platform identified in the page title as PulseGPT. The domain was registered on September 4, 2025, through REG.RU LLC and currently resolves to IP address 157.230.234.35, hosted on infrastructure belonging to DigitalOcean, LLC in the United States. Infrastructure analysis reveals the use of PHP, Laravel, Nginx, Alpine.js, and Livewire, a common technology stack that may facilitate dynamic content delivery and credential harvesting. The domain is flagged by two independent security blocklists and is actively blocked by at least two security providers. A 302 HTTP redirect status is observed, which is frequently employed in phishing campaigns to obscure the final destination or to dynamically serve malicious content based on user attributes. The SSL certificate is issued by Let's Encrypt, a legitimate certificate authority, which does not mitigate the domain's malicious intent but may increase the perceived legitimacy of the site to end users. The page title, 'Авторизоваться - PulseGPT,' explicitly references an authentication process, aligning with the credential phishing classification. No additional brand impersonation or scam subtype is confirmed beyond this title. The domain's nameservers remain under the registrar's control, which may complicate takedown efforts. Defenders are advised to treat this domain as hostile, block resolution at the DNS or network level, and monitor for related infrastructure reuse. The domain remains active as of July 12, 2026, and no evidence suggests a takedown or cessation of operations.