minepi-net[.]com

minepi-net.com was registered on 30 July 2025 through HOSTINGER operations, UAB. The site presents the page title “Wallet – PiNet”, indicating a crypto‑wallet impersonation. Analysis shows the domain resolves to IP 148.230.92.14, which is allocated to AS47583 Hostinger International Limited and geolocated to the United States. The authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or low‑cost hosting services. No TLS certificate is offered, meaning the site is served over plain HTTP only, which further reduces user trust and enables potential man‑in‑the‑middle interception.

The Gridinsoft trust score for the domain is 0 out of 100, reflecting a complete lack of trust. PhishDestroy has already added the domain to its blocklist, and the domain appears on one additional security blocklist. VirusTotal analysis reports that a single out of ninety‑five scanning engines flagged the domain, confirming at least one detection. The scam type is classified as a crypto scam, targeting users who may attempt to access a “PiNet” wallet. The site is currently taken offline, but the infrastructure components—IP address, hosting provider, and name servers—remain reusable for future malicious campaigns.

Uncertainty remains regarding the specific phishing kit or credential‑harvesting mechanisms employed, as no further page content has been captured. Given the single vendor detection, threat intelligence teams should treat the indicator as a low‑confidence but actionable signal, especially when combined with the zero trust score and known blocklist entries. Defenders should continue to block the IP 148.230.92.14, add the domain to local deny lists, monitor DNS queries for the associated name servers, and enforce TLS‑only policies to prevent accidental connections to non‑encrypted endpoints.