pinetworkapp[.]live

The domain pinetworkapp.live is currently classified as an active brand‑impersonation campaign targeting Revolut. The site presents the page title “Pi Network – Minepi.com”, which does not align with the Revolut brand and suggests a misdirection toward a cryptocurrency project. Threat intelligence sources indicate that the domain is being blocked by PhishDestroy and appears on one external blocklist, reinforcing its malicious intent. The domain resolves to the IP address 104.21.35.86, which belongs to AS13335 operated by Cloudflare, Inc. The hosting resides in the United States and the DNS configuration lists the authoritative nameservers gina.ns.cloudflare.com and hunts.ns.cloudflare.com. TLS termination is provided by a certificate issued by Google Trust Services under the WE1 identifier, and the service negotiates HTTP/3, confirming the use of modern Cloudflare edge infrastructure. Registration details show the registrar as Web Commerce Communications Limited dba WebNic.cc. VirusTotal reports that 2 out of 95 scanning engines have flagged the domain, while the Gridinsoft trust score is 0 out of 100, indicating an extremely low confidence in legitimacy. The combination of a low detection count, a zero trust score, and active blocking by a dedicated anti‑phishing platform suggests that the domain is being leveraged for malicious impersonation despite limited visibility in some scanners. Defenders should block the domain at network perimeter and configure email filters to flag any communications that reference pinetworkapp.live or URLs that resolve to the identified Cloudflare IP range. Continuous monitoring of the associated IP address and DNS records is advised, as the infrastructure can be repurposed for additional campaigns. Incident response teams should treat any user reports involving Revolut credential submission to this domain as potentially compromised and initiate credential reset procedures.