petah[.]eligibles[.]live

Analysis of petah.eligibles.live indicates a generic phishing domain with elevated risk, currently offline as of July 24, 2026. The domain was registered on February 21, 2026, through NameSilo, LLC, and uses Cloudflare nameservers (seth.ns.cloudflare.com, sierra.ns.cloudflare.com). It resolved to IP 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the US. No SSL certificate was detected, and the HTTP response returned a page titled 'Just a moment...', a common Cloudflare interstitial that may obscure malicious content from automated scanners.

Detection data is limited but consistent with phishing activity: 2 of 93 security vendors on VirusTotal flagged the domain, and it appears on two blocklists (PhishDestroy and ScamSniffer). Gridinsoft assigned a trust score of 0/100. No brand or specific scam type is confirmed from the available evidence, and the exact content of the phishing page remains unanalyzed. The domain's recent creation, lack of SSL, and Cloudflare hosting align with common phishing infrastructure patterns, though the low detection count suggests it may have been short-lived or narrowly targeted.

Defenders should treat this domain as malicious based on blocklist inclusion and vendor detections. Network-level blocking is recommended, particularly for organizations that may have been targeted by credential phishing campaigns. Further investigation into associated IPs or registrant details may reveal additional linked infrastructure. Given its offline status, monitoring for reactivation or related domains registered under the same entity is advised.