tashipool[.]xyz

This domain tashipool.xyz was created on 2026-02-21 and is currently hosted behind Cloudflare (AS13335, United States). The authoritative name servers are randy.ns.cloudflare.com and raphaela.ns.cloudflare.com. TLS is provided by Google Trust Services under the WE1 certificate, indicating a valid HTTPS endpoint. An HTTP request returns status 403, and the only visible page element is the title “Even geduld…”. Cloudflare Browser Insights and HTTP/3 are detected, confirming the use of modern CDN services.

Threat intelligence classifies the site as an investment-type phishing campaign. The Gridinsoft trust score is 0/100, and the domain appears on one security blocklist. PhishDestroy has already blocked it. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion. No additional vendor detections are reported.

The registrar listed is NiceNIC International Group Co., Limited, a known bulk registration service. While the exact payload or luring content has not been captured, the combination of a low trust score, active blocklist presence, and detection by multiple security vendors indicates a high-risk profile. Defenders should block DNS resolution for tashipool.xyz at the network perimeter, add the domain to URL filtering lists, and monitor outbound connections to the underlying Cloudflare IP 172.67.153.12. Because the site returns a 403 response, any automated crawling may be limited, but the presence of the page title suggests the site is intended to be displayed to victims. Continuous re-scanning is recommended to capture any future changes in payload or additional vendor detections.