pi-xchange[.]com

This domain, pi-xchange.com, is flagged for brand_impersonation targeting Facebook, specifically mimicking its developer and community platform infrastructure. Analysis indicates the site leverages Pi Network branding, as evidenced by the page title 'Pi Blockchain, Community & Developer Platform | Pi Network,' to lend credibility to fraudulent activities. The threat type aligns with credential harvesting or social engineering campaigns, likely designed to exploit trust in both Facebook and Pi Network ecosystems. Infrastructure analysis reveals the domain was registered on March 27, 2025, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 198.251.88.162, which has been linked to prior malicious activity. Detection metrics show 14 out of 95 security vendors flagged the domain on VirusTotal, while it appears on one additional security blocklist. The Gridinsoft trust score of 0/100 further corroborates its elevated risk profile. Technologies detected include WordPress, MySQL, PHP, and LiteSpeed, suggesting a structured but potentially vulnerable web stack. As of the latest assessment, pi-xchange.com has been taken offline, likely in response to security vendor interventions or registrar enforcement actions. However, residual risk persists due to the domain's recent creation and the use of established infrastructure. Users who interacted with the site should assume credential exposure and monitor for unauthorized access. Organizations are advised to block the domain and associated IP at the network level, while end-users should verify developer portals through official channels only.