eligible-jup[.]fun

The domain eligible-jup.fun was registered on December 27, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. No SSL certificate is present, indicating that the site is served over plain HTTP. The authoritative nameservers are eloise.ns.cloudflare.com and pete.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The page title observed during the brief online presence was "Nur einen Moment…", and the site was classified as a crypto‑related scam that impersonates the Jupiter brand.

The infrastructure has been taken offline, yet the domain remains listed on two security blocklists and has been blocked by PhishDestroy and ScamSniffer. Threat intelligence aggregators have recorded the domain in three AlienVault OTX pulses, and VirusTotal reports that six of ninety‑three scanned security vendors flagged the domain as malicious. A Gridinsoft trust score of 0 out of 100 further corroborates the malicious nature of the site.

While the exact content of the landing page was not captured, the combination of brand impersonation, crypto‑scam labeling, lack of TLS, and multiple vendor detections provides strong evidence of a fraudulent operation. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor DNS queries for re‑registration, and consider adding the associated IP address to deny lists. Ongoing observation of Cloudflare‑hosted assets associated with the same nameservers is advised, as threat actors frequently reuse such infrastructure for new campaigns.