automaticpoolcoversanjose[.]com

automaticpoolcoversanjose.com was registered on February 3, 2021 through Tucows Domains Inc. The authoritative nameservers ns1.digitalspaceportal.net and ns2.digitalspaceportal.net resolve the domain to IP address 216.55.149.9, which is allocated to AS30447 Internet Names For Business Inc. in the United States. No TLS certificate is presented, so the site operated only over plain HTTP and returned an HTTP 200 status code before being taken offline. The page title observed during the brief live period was “AT&T Underconstruction,” which does not correspond to the advertised brand. The domain is flagged as a brand‑impersonation campaign targeting Polygon, and the underlying scam type is identified as an investment scam. VirusTotal analysis shows that 16 of 95 scanning engines reported malicious activity related to the domain, indicating a moderate consensus among security vendors.

The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy service. Google Safe Browsing categorizes the site as social engineering, reinforcing the phishing nature of the content. Independent reputation services assign a Gridinsoft trust score of 0 out of 100, the lowest possible rating. AlienVault OTX records the domain in 18 separate threat‑intelligence pulses, providing further corroboration of its malicious use. Defenders should continue to block traffic to 216.55.149.9 and add automaticpoolcoversanjose.com to domain‑based deny lists, even though the site is currently offline, because the infrastructure may be reused for future campaigns.

Monitoring for new DNS resolutions or changes to the hosted IP range is advised. Organizations that use Polygon services should educate users about the risk of unsolicited communications referencing investment opportunities, and email security gateways should be configured to flag any messages containing the domain or its known indicators.