exchange-dc[.]com

The domain exchange-dc.com was registered on May 05, 2025 through Cosmotown, Inc. and is currently marked offline. Infrastructure analysis shows the domain resolves to IP address 198.12.80.250, which is hosted in the United States under ASN 36352 belonging to HostPapa. No SSL certificate is present for the site, and the domain is served by a single nameserver. The page title retrieved from the live endpoint reads "Pi Blockchain, Community & Developer Platform | Pi Network," indicating the malicious actor is leveraging the Pi Network brand to attract victims in a crypto‑related scheme.

Trust scoring from Gridinsoft assigns a zero out of one hundred rating, reflecting a high confidence of malicious intent. VirusTotal scans report nine of ninety‑five security vendors flagging the domain, and the site is listed on one known security blocklist. Additionally, PhishDestroy has actively blocked the domain. The threat classification is recorded as a generic phishing activity with a specific designation of a crypto scam, and the risk level is elevated.

While the offline status limits immediate observation of the site’s content, the combination of a zero trust score, multiple vendor detections, absence of TLS, and the use of a reputable blockchain brand in the page title strongly suggests a credential‑harvesting or financial‑theft operation targeting cryptocurrency users. Defenders should ensure the domain is added to internal deny lists, enforce network‑level blocking of the associated IP range, and monitor for any related indicators of compromise that may surface in other campaigns. Continuous re‑validation of the domain’s status is recommended, as the threat actor could reactivate the site or migrate to alternative infrastructure.