getpippin[.]top

The domain getpippin.top was registered on December 6, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. It is delegated to Cloudflare name servers summer.ns.cloudflare.com and terin.ns.cloudflare.com, and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. No SSL certificate is presented for the host, indicating that HTTPS is not configured or is using a default Cloudflare certificate that is not visible. The only visible page element is the title "Nur einen Moment…", which was captured during a brief scan.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a highly untrusted status. VirusTotal analysis shows that two of ninety‑five security vendors flagged the domain, and the site appears on a single security blocklist. PhishDestroy has taken the domain offline, and the current operational status is reported as offline.

The combination of a newly created domain, Cloudflare front‑end infrastructure, lack of TLS, low trust score, and minimal vendor detections suggests a low‑profile phishing infrastructure that was likely used for a short‑term campaign before being taken down. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any resurgence of the IP address or related Cloudflare name server records, and consider adding the domain to internal blacklist feeds. Ongoing observation of the associated IP and ASN for new malicious activity is advised, as threat actors often recycle Cloudflare‑hosted assets for future campaigns.