eligibility-towns[.]com

The domain eligibility-towns.com was registered on 2025-08-04 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 172.67.128.107, which is associated with AS13335 in the United States. No TLS certificate is presented for the host, indicating that HTTPS is not configured. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain as malicious, and Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high confidence of abuse.

The site has been taken offline as of the report date, but the underlying infrastructure remains reachable through the same IP address, which may be reused for future campaigns. No page title, brand targeting, or specific phishing kit information is available in the current intelligence set, leaving the exact lure and victim profile undefined. Defenders should add eligibility-towns.com to DNS‑based deny lists and ingest the 172.67.128.107 address into network‑level blocklists. Continuous monitoring of the IP for re‑registration or re‑activation is recommended, as Cloudflare‑hosted assets can be quickly repointed.

Because the domain lacks SSL, any attempt to serve login pages over HTTP would be trivially observable in network captures, providing an additional detection vector. Organizations should also review outbound traffic for connections to the Cloudflare IP range and consider applying stricter egress controls for untrusted domains. Given the low trust score and the presence on a phishing blocklist, the domain should be treated as a confirmed phishing indicator until further analysis confirms remediation.