eligible-jup[.]lol

This domain, eligible-jup.lol, was registered on 16 December 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and points to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States). The site does not present an SSL certificate, indicating that HTTPS connections are not secured. The only visible HTML element is the page title “Nur einen Moment…”, which provides no indication of malicious content but aligns with the observed “Crypto Scam” classification. The domain is listed on two security blocklists and has been actively blocked by PhishDestroy and ScamSniffer, confirming that threat‑intelligence feeds have identified it as malicious.

Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports two detections out of 95 scanners, reinforcing the suspicion. The infrastructure uses Cloudflare’s gigi.ns.cloudflare.com and hasslo.ns.cloudflare.com name servers, a common choice for fast‑flux or anonymized hosting. The domain impersonates the brand Jupiter, suggesting that any communications or payment requests referencing Jupiter should be treated as fraudulent. The site’s current HTTP status is offline, which may be temporary or a takedown response, but the underlying indicators remain unchanged.

Defenders should continue to block the domain at perimeter firewalls, update URL filtering lists, and monitor for any resurgence of the IP address or associated Cloudflare name servers. Additional investigation should focus on any payloads or URLs previously observed in phishing emails that reference this domain, and analysts should correlate the two blocklist entries with internal logs to identify potential compromise attempts. Until the domain is definitively taken down, it should be considered high‑risk for credential or crypto‑asset theft.