bvitpie[.]com

The domain bvitpie.com was registered on April 19 2025 through West263 International Limited. It is flagged as impersonating Binance, and the page title references Bitpie, a digital asset wallet, indicating a cryptocurrency focus. The brand target is Binance, suggesting the site is used to lure users of the exchange into a credential‑stealing or asset‑draining flow.

Technical investigation shows the domain resolves to IP 154.198.199.250, which belongs to AS40065 CNSERVERS LLC and is geolocated in Hong Kong. The server presents a TrustAsia Technologies, Inc. DV TLS RSA CA 2025 certificate, confirming TLS termination on the host. HTTP requests return status 200 and the site advertises HSTS and HTTP/3 support. Detected front‑end frameworks include Bootstrap, jQuery, Slick, and the web server is Nginx. Infrastructure scoring by Gridinsoft is 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis flags the domain by 2 of 95 scanners, reinforcing the malicious classification.

Given the confirmed Binance impersonation, the cryptocurrency scam type, and the active status, the risk rating is high. Defenders should immediately block DNS resolution and outbound connections to 154.198.199.250, enforce URL filtering for bvitpie.com, and monitor for any traffic that attempts to contact the host. Additional scrutiny of email and messenger communications that reference Bitpie or Binance should be applied, as the phishing kit likely harvests credentials or private keys. While the page title is known, the exact content of the landing page has not been examined, leaving a gap in understanding of the user‑facing payload. Continuous threat‑intel updates are recommended to capture any changes in hosting or payload delivery.