eligible-usor[.]icu
“Even geduld...”
Сводка доказательств
The domain eligible-usor.icu is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, eligible-usor.icu has been taken offline, reducing immediate risk but not eliminating the potential for future malicious use.
Technical indicators confirm the elevated risk level of eligible-usor.icu. The domain was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and SOCRadar. It appears on 3 security blocklists, specifically PhishDestroy, MetaMask, and SEAL. Registered through Eranet International Limited on February 21, 2026, the domain resolves to the IP address 188.114.97.3, hosted by Cloudflare, Inc. in the US. No SSL certificate was observed, and the page title displayed 'Even geduld...' during analysis. Nameservers for the domain are anastasia.ns.cloudflare.com and santino.ns.cloudflare.com. Gridinsoft assigned a trust score of 0 out of 100.
Users who may have interacted with eligible-usor.icu should take immediate safety steps. If login credentials were entered, change passwords for affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions or relevant platforms. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims can also notify their email provider or browser vendor to help prevent further exposure.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260128-61F350- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Acceptable Use Policy (AUP): The domain eligible-usor.icu is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations. The ongoing phishing operations constitute a clear breach of these terms, warranting immediate action.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is applicable to phishing schemes.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, including phishing.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices online.
Regulatory Note: Failure to take prompt action against the domain eligible-usor.icu may result in regulatory scrutiny and potential liability under applicable laws. Immediate suspension is recommended to mitigate risks associated with non-compliance.
Data Coverage
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 13.08.2026
10 внешних источников под наблюдением Совпадений нет
Хронология обнаружения
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ЗОНА SHORTDOT · ПУБЛИЧНЫЕ ДОКАЗАТЕЛЬСТВА
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Криминалистическая аналитика
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание