jpool[.]org

The domain jpool.org was registered on August 10 2025 through Spaceship, Inc. and currently resolves to the IP address 172.67.200.248, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presents the page title “Jpool” and is protected by an SSL certificate identified as WE1. Independent reputation services have assigned very low trust scores: Scamadviser rates the domain at 30 out of 100, while Gridinsoft records a score of 0 out of 100. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service.

VirusTotal analysis shows that one out of ninety‑three scanning engines flagged the domain, indicating at least one detection of malicious behavior. Current operational status is offline, which limits real‑time observation but does not eliminate the risk posed by the underlying infrastructure. The intelligence categorizes the activity as an “Investment Scam,” a classification that aligns with the low reputation metrics and the presence on anti‑phishing blocklists.

Defenders should continue to block the domain at perimeter and DNS layers, monitor any outbound connections to the associated Cloudflare IP, and consider adding the host to internal threat‑intel feeds. Because the site is offline, further content analysis is not possible; however, the combination of a recent registration, low trust scores, a single vendor detection, and explicit blocklist entries provides sufficient evidence to treat jpool.org as a high‑confidence malicious indicator. Ongoing vigilance is recommended to detect any re‑activation or related infrastructure that may emerge in the future.