pinetworkexchange[.]sbs

Analysis of pinetworkexchange.sbs, observed on July 24, 2026, indicates a high‑confidence brand‑impersonation threat targeting Facebook users. The domain was registered through Dynadot LLC on January 07, 2025 and is delegated to the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. Infrastructure data shows the domain resolves to the IPv6 address 2a02:4780:b:1109:0:2f60:8e67:10, which is assigned to AS47583, a Hostinger International Limited network located in the United States. No Transport Layer Security (TLS) certificate is presented for the host, confirming the absence of HTTPS encryption.

A Gridinsoft trust score of 0 out of 100 further reflects a lack of legitimacy. The site’s page title, "Pi Network – Pi Blockchain, Community & Developer Platform | Pi Network," is unrelated to the claimed Facebook impersonation, suggesting the domain is being reused to promote a crypto‑related scheme. VirusTotal scans report that seven of ninety‑five security vendors flagged the domain, and the domain appears on at least one public blocklist. PhishDestroy has also listed the domain as blocked, reinforcing the malicious classification.

The domain is currently offline, preventing immediate content inspection, and no additional evidence such as login pages or phishing forms has been captured. Defenders should continue to block traffic to both the IPv6 address and the domain name, monitor for any resurgence of the site, and add the domain to internal deny lists. Because the site is offline, ongoing reconnaissance is advised to detect any re‑hosting attempts or changes in the hosting infrastructure that could revive the threat.