pi-mallshop[.]com

The domain pi-mallshop.com was a phishing site engaged in brand impersonation targeting Apple users. It presented itself as a legitimate retail platform under the name 'Pi Network Mart,' attempting to deceive visitors into submitting personal or financial information. No crypto drainer kit was identified, but the site posed an elevated risk due to its fraudulent representation of a trusted brand. As of the latest verification, pi-mallshop.com has been taken offline.

Technical indicators confirm the malicious nature of pi-mallshop.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned it a trust score of 0 out of 100. It appeared on one security blocklist, PhishDestroy, and was registered through Cosmotown, Inc. on July 19, 2025. The site resolved to the IP address 198.12.80.250, hosted by AS36352 (HostPapa) in the US, and had no SSL certificate. The observed page title was 'Pi Network Mart,' and the domain used a single nameserver.

Individuals who interacted with pi-mallshop.com should take immediate safety steps. If login credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized transactions or suspicious activity. Report the phishing domain to platforms such as Google Safe Browsing, the Anti-Phishing Working Group (APWG), or the impersonated brand’s security team to aid in mitigation efforts.