Security Scan: Pi Network

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1e9d7b8a-c1d8-4e4b-b8ca-6f2690af7a1a Domain and IP registration (RDAP)/api/v1/rdap/1e9d7b8a-c1d8-4e4b-b8ca-6f2690af7a1aHow often this domain was scanned/api/v1/domain/stats/pi-workers.com Scan history for this domain/api/v1/domain/history/pi-workers.com?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 26 HTTP transactions. The main domain is pi-workers.com and was registered 1 week ago.

Submitted URL: https://pi-workers.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Confirmed malicious: DarkSword/Coruna wallet-stealer kit posing as a Pi Network wallet unlock page on a 13-day-old domain, with CRITICAL exploit-kit IDS alerts and multi-source threat-intel matches. Never enter a passphrase here.

Risk Factors (6)

Analyst-vetted known malicious exploit kit (DarkSword / Coruna wallet stealer) confirmed by two independent kit-roster sightings

CRITICAL IDS alerts for exploit-kit visitor beaconing to /api/ip-sync/sync

Brand impersonation of Pi Network on a domain (pi-workers.com) that is not Pi Network's official domain

Third-party resource on the page (mobilecare.me) flagged as malware across two independent feeds

Page solicits a 24-word wallet passphrase (crypto seed-phrase theft lures)

Domain registered 13 days ago and absent from Cisco Umbrella top 1M

Domain age information unavailable

Details

Page Title

Pi Network

Scan Type

public

Favicon Hash

MMH3: -1864219470

MD5: f093ff5703ac61171f1e74e8f7db04fd

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'pi-workers.com' is registered. The second-level label 'pi-workers' is 10 characters long with three vowels and six consonants, notching 1 hyphen. It segments into 2 words: pi, workers. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

° 티 지갑 잠금 해제 24개 단어 패스프레이즈를 여기에 임력하세요 이즈로 해제 생체 BS 사용할 수 없습니다 비수탁형지갑이므로 지갑의 패스프레이즈는 본인만 접근할 수 있습 니다. 패스프레이즈 복원은 현재 불가능합니다. 패쓰프레이즈를 분실하셨나요? 새 지갑 만들기할 수 있지만 이전 지 갑의 모든 7에 접근할 수 없게 됩니다.

Page Load Overview

75.10s

Total Load Time

38 KB

Total Size

Language Analysis

Primary Language

🇰🇷Korean

Code: ko

Confidence:80%

Script:Hangul

Direction:ltr

Detection Details

HTML Lang Attribute:ko

Text Length:185 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking63% confidence

Type: static

Method: ml+structural

All Detected Categories

finance banking

63%

cryptocurrency blockchain

45%

healthcare medical

42%

technology software

38%

documentation technical

33%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	104.21.89.239Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.16.185.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.191.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	115.68.74.147	South Korea	AS38700SMILESERV
4	104.16.184.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.200.57Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	6	-	-