tashipools[.]xyz

Analysis as of July 24 2026 indicates that the domain tashipools.xyz was registered on February 21 2026 through NiceNIC International Group Co., Limited. The domain resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by the Cloudflare name servers edna.ns.cloudflare.com and nash.ns.cloudflare.com. The site presented a page title of “Just a moment…”, and the TLS certificate was issued by Google Trust Services under the WE1 certificate authority, confirming the use of a valid HTTPS certificate.

Observed web technologies include Cloudflare Browser Insights and HTTP/3, indicating that traffic was being proxied through Cloudflare’s edge network. VirusTotal scans reported that four of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of abuse. Independent monitoring services such as PhishDestroy have added tashipools.xyz to their blocklist, and the domain appears on one additional security blocklist. The threat profile is classified as an investment scam, consistent with the elevated risk rating assigned by analysts.

The domain’s current status is offline, suggesting that the malicious content has been taken down or the hosting has been terminated. Nevertheless, the infrastructure—particularly the use of Cloudflare’s network and a legitimate‑looking SSL certificate—demonstrates an attempt to lend credibility to the fraudulent operation. Defenders should continue to block the domain at network perimeters, update threat‑intel feeds with the observed indicators of compromise, and monitor the associated IP address 188.114.96.3 for any future re‑use. Ongoing vigilance is recommended given the recent creation date and the presence of multiple vendor detections.