piexchange[.]vip

The domain piexchange.vip was identified as a phishing site engaged in brand impersonation, specifically targeting Facebook. This domain was used in a cryptocurrency scam, attempting to deceive users by presenting itself as a legitimate Facebook-related platform. The site is currently offline, reducing immediate risk, but it was previously active and posed an elevated threat to users seeking information or services related to Facebook or cryptocurrency exchanges.

Technical analysis shows that piexchange.vip was registered through Dynadot LLC on June 22, 2025, and resolved to IP address 82.197.83.53, which is hosted in the US under AS47583 (Hostinger International Limited). The domain appeared on one security blocklist (PhishDestroy) and was flagged by 1 of 95 security vendors on VirusTotal, specifically Gridinsoft. Google Safe Browsing did not flag the domain. The site did not have an SSL certificate, and the observed page title was 'Pi Network – Pi Blockchain, Community & Developer Platform | Pi Network.' Nameservers used were ns1.dns-parking.com and ns2.dns-parking.com. The Gridinsoft trust score was 0/100, indicating a high-risk profile.

For those who interacted with piexchange.vip, it is recommended to change any passwords used on the site, enable two-factor authentication on related accounts, and closely monitor for signs of unauthorized activity or fraud. Since this was a cryptocurrency scam, users should also review their wallets for any suspicious transactions. Any incidents involving piexchange.vip can be reported to relevant authorities and security services to help prevent further phishing or brand impersonation attempts.