goalpinus[.]shop

PhishDestroy first observed goalpinus.shop on Sep 8, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Cloudflare Radar, and URLQuery. VirusTotal recorded 18 detections among 89 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Netcraft, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 8, 2026 at 20:09 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. URLQuery recorded 5 threat-system alerts on Sep 8, 2026 at 19:10 UTC. Non-positive and contextual checks: AlienVault OTX listed 5 community pulse references (not vendor detections) on Sep 8, 2026 at 20:10 UTC. The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Sep 8, 2026 at 20:09 UTC. URLScan captured the page on Sep 8, 2026 at 19:07 UTC.

The collector marked the hostname reachable on Sep 8, 2026 at 19:07 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 163.181.254.143. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery; no page title was retained, so the captures preserve the landing-page appearance.

The record contains 3 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.