eligible-pudgy[.]com

eligible-pudgy.com has been identified as a high‑risk generic phishing site. The domain resolves to IP 104.21.71.31 and consistently returns an HTTP 403 status code. The only page title observed is “Just a moment…”, which is typical of a Cloudflare challenge page and does not provide any legitimate service content.

The hosting infrastructure is fully Cloudflare‑mediated. The authoritative nameservers are lindsey.ns.cloudflare.com and ridge.ns.cloudflare.com, and the site exhibits Cloudflare Browser Insights and HTTP/3 support. The SSL certificate is issued by Google Trust Services under the WE1 profile, a common pairing for Cloudflare‑proxied domains. The IP belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States.

Domain registration took place on February 21, 2026 through Metaregistrar BV. The domain carries a Gridinsoft trust score of 0/100 and appears on five security blocklists. It is presently blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis shows that 2 of 95 scanned security vendors flagged the domain, reinforcing its malicious reputation despite the low detection ratio.

Current intelligence indicates the site is active and classified as generic_phishing with a high risk level. While the page title and infrastructure suggest a typical phishing delivery chain, no visible payload or credential‑capture form has been captured, leaving the exact phishing vector uncertain. Defenders should therefore treat the domain as hostile, add it to inbound and outbound filtering rules, enforce DNS sinkholing for the associated IP address, and monitor any traffic directed to 104.21.71.31.

Continuous re‑evaluation is recommended. Analysts should obtain a full page capture, inspect any subsequent redirects, and correlate network traffic with known phishing kits. Updating blocklists and threat‑intel feeds with the latest findings will help mitigate any future attempts that may leverage the same infrastructure.