pippin[.]network

This domain is flagged as a high-risk generic phishing site. As of July 12, 2026, the domain remains active and resolves to IP address 172.67.221.194, hosted in the United States on AS13335 (Cloudflare, Inc.). The domain is registered through Cloudflare, Inc. and uses nameservers lovisa.ns.cloudflare.com and noel.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1). HTTP status is 403, and the page title displays 'Just a moment...', which is commonly associated with Cloudflare's challenge page. This suggests the actual phishing content may be behind a protection layer or is no longer directly accessible. The domain appears on one security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100. VirusTotal shows 2 out of 95 security vendors flagging the domain, indicating limited but existing detection among security engines. Technologies detected include Cloudflare Browser Insights, Cloudflare, and HTTP/3. No specific brand target or scam kit is identified from the available data, so the exact nature of the phishing operation is not yet determined. Defenders should treat this domain as actively hostile; block access at network and email gateways, and monitor for any associated subdomains or IP changes. As the site returns a 403 status, it may be configured to only serve malicious content under certain conditions (e.g., specific user agents or referrers). Caution is advised against visiting the domain directly.