gojup[.]xyz

gojup.xyz is an active phishing domain that has caught the attention of security analysts. Despite being flagged by only 1 out of 94 vendors on VirusTotal, it is already listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This highlights its potential threat level, especially since it was detected on the same day it was created, March 3, 2026.

The domain is registered with Spaceship, Inc. and hosted on an IP address managed by Cloudflare, Inc., located in the United States. The absence of an SSL certificate suggests a lack of security measures, which is typical for phishing operations aiming to deceive users quickly before being shut down. The page title "Just a moment..." might be a tactic to delay users and execute malicious scripts or redirect them to fraudulent sites.

The platform risk score for gojup.xyz is 73 out of 100, indicating a significant threat level. The domain's early detection and listing on multiple blocklists demonstrate effective monitoring and swift action by security platforms. This case underscores the importance of timely detection and response to new phishing threats, as they often exploit the critical window between domain registration and broader security database updates.