Security Scan: Pi Network

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3cfe947e-5180-44e3-9099-51680d172c37 Domain and IP registration (RDAP)/api/v1/rdap/3cfe947e-5180-44e3-9099-51680d172c37How often this domain was scanned/api/v1/domain/stats/p1-nework.com Scan history for this domain/api/v1/domain/history/p1-nework.com?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is p1-nework.com and was registered 4 weeks ago.

Submitted URL: https://p1-nework.com

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Confirmed malicious: a fake Pi Network wallet-unlock page on typo-squatted p1-nework.com that harvests 24-word recovery passphrases and is flagged with the DarkSword iOS exploit kit / Coruna wallet stealer by hunting rule, kit roster, IDS and Safe Browsing.

Risk Factors (6)

Known DarkSword iOS exploit kit identified by kit roster and native hunting rule

Google Safe Browsing social-engineering detection

Critical IDS exploit-kit beacon alerts plus IP-check auxiliary requests (icanhazip.com, mobilecare.me)

Brand impersonation of Pi Network on unrelated typo-squatted domain p1-nework.com

Seed-phrase (24-word passphrase) collection screen designed to steal crypto wallets

Domain is 27 days old and not ranked in Cisco Umbrella top 1M

Domain age information unavailable

Details

Page Title

Pi Network

Scan Type

public

Favicon Hash

MMH3: -1864219470

MD5: f093ff5703ac61171f1e74e8f7db04fd

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'p1-nework.com' is registered while skipping any subdomain. Its registrable label 'p1-nework' stretches across 9 characters holding two vowels versus 5 consonants; bonus characters include 1 digit and 1 hyphen. Splitting it apart reveals 4 words: p, 1, ne, work. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Unlock Pi Wallet Enter your 24-word passphrase here ‘Unfock With Passphrase) Biometric Not Available As a non-custodial wallet, your wallet passphrase is exclusively accessible only to you. Recove...

Page Load Overview

2.57s

Total Load Time

37 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:343 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	172.67.191.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.27.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.89.239Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.169.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.16.185.241Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	5	-	-