gondipool[.]xyz

gondipool.xyz is a recently activated phishing domain designed to impersonate legitimate pool services, tricking users into entering personal or payment details under false pretenses. The site poses as a professional pool cleaning or maintenance provider but is engineered to harvest sensitive information or deliver malware. Security researchers have flagged this as an active threat due to its deceptive branding and lack of legitimate infrastructure. If you encounter this domain, avoid interacting with it entirely to prevent potential financial or data loss.

PhishDestroy identifies this domain as a confirmed phishing site targeting unsuspecting users through fake pool service advertisements or booking pages. The domain was created on September 27, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting high-risk domains. VirusTotal currently shows 0 detections out of 95 security engines, indicating it has evaded many automated detection systems. The site resolves to IP address 172.67.132.154 and uses a Google Trust Services SSL certificate, which may lend it an air of legitimacy despite its malicious intent.

If you have visited gondipool.xyz, disconnect from the site immediately and avoid entering any personal information, including names, addresses, or payment details. Run a full antivirus scan on your device to check for potential malware or unauthorized access. Report the domain to your local cybersecurity authority or platform abuse teams to help prevent others from falling victim. Monitor your financial accounts and credit reports for any suspicious activity, as phishing sites often harvest data for identity theft or fraudulent transactions.