eligible-usor[.]icu

The domain eligible-usor.icu is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, eligible-usor.icu has been taken offline, reducing immediate risk but not eliminating the potential for future malicious use.

Technical indicators confirm the elevated risk level of eligible-usor.icu. The domain was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and SOCRadar. It appears on 3 security blocklists, specifically PhishDestroy, MetaMask, and SEAL. Registered through Eranet International Limited on February 21, 2026, the domain resolves to the IP address 188.114.97.3, hosted by Cloudflare, Inc. in the US. No SSL certificate was observed, and the page title displayed 'Even geduld...' during analysis. Nameservers for the domain are anastasia.ns.cloudflare.com and santino.ns.cloudflare.com. Gridinsoft assigned a trust score of 0 out of 100.

Users who may have interacted with eligible-usor.icu should take immediate safety steps. If login credentials were entered, change passwords for affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions or relevant platforms. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims can also notify their email provider or browser vendor to help prevent further exposure.