eligible-ore[.]pro

Analysis of the domain eligible-ore.pro shows that it was registered on February 21, 2026 and presently resolves to the IP address 172.67.166.25, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site’s SSL certificate is identified as WE1, providing only minimal cryptographic assurance. The page title returned by the server is the Japanese phrase “しばらくお待ちください…”, meaning “Please wait a while…”, which does not reveal any legitimate brand or service. VirusTotal scans indicate that six out of ninety‑three antivirus and URL‑reputation engines flagged the domain as malicious, confirming a consensus of concern among security vendors.

Independent blocklist monitoring shows the domain is listed on a single known blocklist, specifically PhishDestroy, which has actively blocked the host. Gridinsoft assigned a trust score of zero out of one hundred, further underscoring the lack of credibility. As of the reporting date, the domain is offline, suggesting that the phishing campaign may have been taken down or is temporarily unavailable.

However, the infrastructure components—recent registration, Cloudflare hosting, low‑trust SSL, and multiple vendor detections—remain characteristic of generic phishing operations. Defenders should continue to deny DNS resolution for eligible-ore.pro, incorporate the IP address 172.67.166.25 into network‑level deny lists, and monitor for any reappearance of the domain or related subdomains. Additional scrutiny of traffic to Cloudflare‑hosted addresses that share the same ASN may be warranted, and any future sightings should be reported to threat‑intel sharing platforms to aid collective mitigation.