pi-network-hub[.]com

Analysis of pi-network-hub.com confirms it as a high-risk investment scam impersonating Lido, a liquid staking protocol. The domain, registered on October 30, 2025, through NiceNIC International Group Co., Limited, resolves to IP 104.21.32.75 (AS13335 Cloudflare, Inc., US) and uses Cloudflare nameservers (gina.ns.cloudflare.com, pedro.ns.cloudflare.com). No SSL certificate is present, increasing exposure to interception risks. The page title, 'Lido - Liquid Staking for Digital Empower your digital assets with Liquid Staking Solutions: Tokenizing the Future of Staking,' directly mimics Lido’s branding and liquid staking services, aligning with the classified scam type of investment fraud.

Security vendors have flagged the domain, with 11 of 95 engines on VirusTotal detecting malicious activity. It appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, and was taken offline following enforcement actions. Defenders should treat this domain as confirmed malicious infrastructure.

Recommended actions include blocking the domain and IP at perimeter defenses, monitoring for related Cloudflare-hosted domains registered via NiceNIC, and alerting users to the Lido impersonation scam. The absence of SSL and the use of Cloudflare’s network are consistent with low-effort scam operations seeking to evade detection while leveraging reputable hosting providers. No further page content analysis is available, but the combination of brand impersonation, blocklist presence, and detection vendor flags provides sufficient evidence for immediate defensive measures.