pippinbnb[.]fun

This domain, pippinbnb.fun, was created on 16 December 2025 and is currently taken offline. It resolves to the IPv6 address 2a02:4780:b:1452:0:3836:eb30:10, which is owned by AS47583 Hostinger International Limited and hosted by Hostinger operations, UAB. The domain uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com and does not present an SSL certificate, indicating a lack of encrypted transport. The only visible page element is the title “Pippin”, which does not reference the targeted brand.

Intelligence flags the site as a crypto‑scam that impersonates the ChatGPT brand. VirusTotal records show that two of ninety‑three security scanners flag the domain, and it appears on a single security blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigns it a trust score of 0 out of 100, reflecting a high likelihood of malicious activity. The combination of a recent registration, hosting on a shared provider, absence of TLS, low trust rating, and detection by multiple vendors suggests the infrastructure was deliberately provisioned for fraudulent purposes.

However, because the site is offline, the exact content and any payload delivery mechanisms cannot be confirmed at this time. Defenders should continue to block the domain and associated IPv6 host, monitor for any future re‑registration, and consider adding the address to network‑level deny lists. Additional investigation of the hosting provider’s abuse channels may yield further indicators, and any inbound traffic to the IP should be logged for correlation with other crypto‑scam campaigns.