pc[.]tier1fxvip[.]cc

As of July 12, 2026, the domain pc.tier1fxvip.cc is identified as a high-risk phishing infrastructure primarily used for a fake exchange scam. The domain was registered on March 22, 2026, through Gname.com Pte. Ltd., and is currently active. It resolves to the IP address 188.114.97.3, which is located in Canada and is associated with CloudFlare, Inc. The domain's nameservers are celine.ns.cloudflare.com and kirk.ns.cloudflare.com, indicating the use of CloudFlare's DNS services for potential obfuscation or DDoS protection. The domain is flagged by 10 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among security professionals. Additionally, the domain has an SSL certificate issued by Google Trust Services, which may be used to gain user trust and reduce browser warnings, but it does not mitigate the risk of phishing. The domain appears on three security blocklists, further corroborating its malicious nature. Gridinsoft has assigned the domain a trust score of 0/100, indicating a complete lack of trustworthiness. Defenders should implement blocking rules for this domain and monitor for any related subdomains or IP addresses. Users are advised to avoid interacting with this domain and to report any phishing attempts to their security teams. The combination of a recent registration date, the presence on multiple blocklists, and the high number of security vendor flags provides strong evidence that this domain is part of an active phishing campaign targeting individuals seeking to use online financial services. While the exact scale and impact of the campaign are uncertain, the risk level is high, and proactive measures should be taken to mitigate potential threats.