gojocoin[.]com

The domain gojocoin.com was registered on 2026-02-21 through DropCatch.com 1410 LLC and is presently classified as active with a high risk rating. The page title returned by the server reads “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | GojoCoin”, which directly references the Ethereum brand and positions the site as a cryptocurrency exchange, fitting the documented scam type of cryptocurrency fraud.

Infrastructure analysis shows the domain resolves to the IPv6 address 2a06:98c1:3120::3. The address is hosted in the United States under ASN 13335, which belongs to Cloudflare, Inc. Authoritative nameservers are nsg1.namebrightdns.com and nsg2.namebrightdns.com. HTTP responses return a 302 redirect, and the TLS certificate presented is identified as WE1. The Gridinsoft trust score is 0 out of 100, indicating a complete lack of trust from that engine.

Threat intelligence confirms that gojocoin.com appears on a single external security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal reports one detection out of 95 scanning engines, demonstrating that at least one vendor has flagged the domain as malicious. Combined with the brand impersonation of Ethereum, the low trust score, and the active status, the evidence supports a high‑confidence assessment that the domain is being used for fraudulent cryptocurrency activities.

Defensive actions should include adding gojocoin.com to network deny lists and configuring DNS filtering to block resolution to the identified IPv6 address. Continuous monitoring of the associated nameservers is recommended, as they may be leveraged for future malicious registrations. Security operations should treat any inbound or outbound traffic to this domain as a potential fraud attempt and reinforce user awareness about unsolicited offers involving Ethereum or other digital assets.