eligible-jup[.]rocks

The domain eligible-jup.rocks was registered on December 28, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to 172.67.144.130, an address owned by AS13335 Cloudflare, Inc., and the authoritative nameservers are jonah.ns.cloudflare.com and rosalyn.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. No SSL/TLS certificate was presented for the site, meaning HTTPS connections would be unavailable or unencrypted if the domain were re‑activated. The only visible artifact when the domain was online was a page title reading “Un momento…”, which does not provide substantive context about the page’s purpose.

The domain is classified as a brand‑impersonation campaign targeting the brand Jupiter and is described as a crypto‑related scam. Evidence of malicious activity includes identification by PhishDestroy, placement on a single security blocklist, and detection by eight of ninety‑three security engines on VirusTotal. Additionally, two AlienVault OTX threat‑intel pulses reference the domain, and Gridinsoft assigned it a trust score of 0 out of 100, reinforcing the assessment of high risk.

While the infrastructure details (Cloudflare hosting, IP location in the United States) are typical for many benign services, the combination of brand impersonation, crypto‑scam labeling, low trust scoring, and multiple vendor detections suggests the domain was used for fraudulent purposes. Defenders should block the domain and its associated IP at perimeter defenses, monitor for any re‑use of the Cloudflare IP range in relation to similar brand‑impersonation activity, and consider adding the domain to internal threat‑intel feeds. Continuous re‑evaluation is advised if the site resurfaces, especially to verify any changes to SSL configuration, page content, or detection rates.