payunlockpinet[.]com

payunlockpinet.com was registered on 21 February 2026 and is currently listed as offline. The domain resolves to the IPv4 address 198.12.80.250, which belongs to AS36352 operated by HostPapa in the United States. An SSL certificate labeled “R11” is present, but the certificate details do not match the legitimate Pi Network branding. The page title returned from the host is “Pi Blockchain, Community & Developer Platform | Pi Network,” indicating an attempt to associate the site with the Pi cryptocurrency ecosystem.

VirusTotal has recorded 12 detections out of 93 scanning engines, confirming that multiple security vendors consider the host malicious. The domain appears on a single public blocklist and is specifically flagged by PhishDestroy, reinforcing its classification as a crypto‑related scam. The threat intelligence categorizes the activity as a crypto scam, consistent with the use of the Pi Network name in the title. No further evidence such as Safe Browsing verdicts, Open Threat Exchange tags, or registrar information is available.

The limited visibility of additional infrastructure suggests that the operator may be using shared hosting resources to reduce cost and exposure. Defenders should block traffic to 198.12.80.250 and add payunlockpinet.com to domain deny lists. Monitoring for new subdomains under the same registrar or similar naming patterns is advised, as well as continued observation of any resurgence of the site. Incident response teams should treat any credential or payment requests referencing the Pi Network from this domain as fraudulent.