pippins[.]app

This domain, pippins.app, was registered on February 27, 2026, through NiceNIC International Group Co., Limited, and remains active as of July 12, 2026. Infrastructure analysis reveals it is hosted behind Cloudflare (AS13335), resolving to the IP address 188.114.96.3, with nameservers edna.ns.cloudflare.com and kevin.ns.cloudflare.com. The site returns an HTTP 403 status, and the only visible page title is 'Just a moment...', which is consistent with Cloudflare's interstitial challenge or access restriction page. No further content or brand association has been confirmed through available data. The domain is flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL, and has been assigned a trust score of 0/100 by Gridinsoft. Two of ninety-three security vendors on VirusTotal have detected the domain as malicious. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Technologies detected include Cloudflare Browser Insights and HTTP/3, indicating the use of modern web infrastructure often leveraged by threat actors to evade detection and improve performance. While the domain is classified as generic phishing, the specific target or scam type remains unconfirmed due to the lack of accessible content. Defenders should treat this domain as high-risk and consider blocking it at the DNS or network level. Further analysis, including sandboxed access or historical content retrieval, may be required to determine the exact nature of the threat. The use of Cloudflare infrastructure does not inherently indicate malicious intent but is frequently observed in phishing campaigns due to its ability to obscure origin servers and provide DDoS protection.