goofystresse[.]st

The domain goofystresse.st was registered on April 29, 2026 and is currently classified as a high‑risk generic phishing site. It appears in a single AlienVault OTX pulse and has been added to one public blocklist. The domain is actively blocked by PhishDestroy, indicating that at least one remediation service has identified it as malicious. Technical resolution shows the domain pointing to IP address 104.26.9.177, which belongs to Cloudflare, Inc. and is geolocated to Canada. The web server presents a Let's Encrypt certificate identified as “E8” and returns HTTP status code 403 for direct requests, while the page title observed in the browser reads “Just a moment…”. Gridinsoft assigns a trust score of 41 out of 100, reflecting a low confidence rating. VirusTotal analysis reports that two of ninety‑five scanned security vendors flag the domain, suggesting that detection is not yet widespread across scanning engines. The limited number of detections may be due to the domain’s recent creation date or the use of evasive hosting techniques. No additional intelligence about associated phishing kits, credential harvesting pages, or targeted brands is available. Defenders should add goofystresse.st to DNS block lists and monitor outbound connections to the associated Cloudflare IP. Since the site returns a 403 status and displays a generic “Just a moment…” page, it is likely employing JavaScript challenges to hide malicious payloads. Continuous re‑scanning with updated antivirus engines is advised, and any observed credential submissions should be investigated for possible compromise.