tradenpi[.]com

Analysis of tradenpi.com reveals a short‑lived domain created on 21 February 2026 and currently taken offline. The domain resolves to IP address 104.21.44.134, which belongs to Cloudflare, Inc. (ASN 13335) and is geolocated in the United States. The site presented the page title “Pi Blockchain, Community & Developer Platform | Pi Network,” suggesting an attempt to lure victims interested in the Pi cryptocurrency ecosystem. Reputation services assign extremely low trust scores: Scamadviser rates the domain 10 / 100 and Gridinsoft 0 / 100.

The SSL certificate is identified as “WE1,” indicating a basic or potentially self‑signed certificate. Malware‑scanning on VirusTotal recorded detections by 2 of 95 security vendors, and the domain is listed on at least one public security blocklist as well as being blocked by the PhishDestroy feed. Registration details list Web Commerce Communications Limited dba WebNic.cc as the registrar, with authoritative nameservers ns100.webnic.cc and ns101.webnic.cc.

While the site is no longer reachable, the observed indicators confirm the domain was used for a crypto‑related phishing campaign. Defenders should ensure that the IP address 104.21.44.134 and the domain tradenpi.com are added to firewall and DNS filtering policies, monitor for any residual connections from internal hosts, and correlate any authentication attempts targeting Pi Network accounts with this indicator set. Continuous ingestion of the PhishDestroy feed and periodic re‑scanning of the domain on multi‑vendor platforms are recommended to capture any resurgence or related infrastructure.