pudgy-eligibility[.]com

The domain pudgy-eligibility.com was registered on January 02, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. It resolves to the IP address 142.250.186.100, which is allocated to AS15169 Google LLC and geolocated to Germany. The domain uses Cloudflare’s recursive name servers chad.ns.cloudflare.com and stella.ns.cloudflare.com, a common pattern for fast‑flux or proxy‑based hosting. No TLS certificate is presented, so the site would have been reachable only via plain HTTP.

The only visible HTML element captured is a page title of "Google", matching the declared brand target and confirming the classification as a brand‑impersonation campaign aimed at Google. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on two independent blocklists – PhishDestroy and ScamSniffer – indicating that external threat‑intel feeds have already flagged it. VirusTotal analysis shows that 12 of 93 scanning engines flagged the domain, providing additional corroboration of malicious intent. The absence of an SSL certificate, combined with the use of a legitimate Google‑owned IP range, suggests an attempt to lend credibility to the phishing effort while avoiding the costs of certificate acquisition.

Defenders should block pudgy-eligibility.com at the DNS and proxy layers, add the IP 142.250.186.100 to reputation‑based deny lists, and monitor for any re‑registration or use of the same name servers for similar campaigns. Because the site is offline, active probing is limited; further investigation would require a safe sandbox capture of the landing page to verify if any credential‑harvesting forms were present. Until such evidence is obtained, the existing blocklist placements and the low trust score justify maintaining an elevated risk posture for this infrastructure.