# gondipool.xyz — SUSPICIOUS

> gondipool.xyz impersonates pool cleaning services in a phishing scam. VirusTotal shows 0/95 detections. Check the full report.

## Summary
gondipool.xyz is a recently activated phishing domain designed to impersonate legitimate pool services, tricking users into entering personal or payment details under false pretenses. The site poses as a professional pool cleaning or maintenance provider but is engineered to harvest sensitive information or deliver malware. Security researchers have flagged this as an active threat due to its deceptive branding and lack of legitimate infrastructure. If you encounter this domain, avoid interacting with it entirely to prevent potential financial or data loss.

PhishDestroy identifies this domain as a confirmed phishing site targeting unsuspecting users through fake pool service advertisements or booking pages. The domain was created on September 27, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting high-risk domains. VirusTotal currently shows 0 detections out of 95 security engines, indicating it has evaded many automated detection systems. The site resolves to IP address 172.67.132.154 and uses a Google Trust Services SSL certificate, which may lend it an air of legitimacy despite its malicious intent.

If you have visited gondipool.xyz, disconnect from the site immediately and avoid entering any personal information, including names, addresses, or payment details. Run a full antivirus scan on your device to check for potential malware or unauthorized access. Report the domain to your local cybersecurity authority or platform abuse teams to help prevent others from falling victim. Monitor your financial accounts and credit reports for any suspicious activity, as phishing sites often harvest data for identity theft or fraudulent transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-09-27 11:33:20
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.132.154

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9bb9d4c5-3f21-4de6-8fec-0fa320e1a409
- PhishDestroy: https://phishdestroy.io/domain/gondipool.xyz/
- LLM endpoint: https://phishdestroy.io/domain/gondipool.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gondipool.xyz/
Last updated: 2026-03-27