# savebig40.com — SUSPICIOUS

> The domain savebig40[.]com has been identified as a cryptocurrency phishing site. This malicious website targets Web3 users, attempting to steal wallet credentials and digital assets. PhishDestroy detected 2 risk indicators. View the full threat analysis.

## Summary
Threat Overview
The domain savebig40[.]com has been identified as a cryptocurrency phishing website. This malicious site targets Web3 users by mimicking legitimate crypto platforms to steal wallet credentials and digital assets.
Attack Analysis
Phishing sites in the cryptocurrency space commonly employ wallet-draining techniques, fake token approval requests, and seed phrase harvesting to steal digital assets from unsuspecting victims.
Risk Indicators

- Domain registered on com TLD
- Contains cryptocurrency-related keywords
- Domain length: 13 characters
- Contains numbers in the domain name, often seen in phishing
- Drainer Detected

Protection Tips
Always verify URLs before connecting your wallet. Use bookmarks for frequently visited crypto platforms. Enable transaction simulation tools to preview what you're signing.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Fenty Beauty - Claim Your $100 Gift Card

## Domain Intelligence
- Registered: 2026-03-12 17:07:01
- Registrar: NAMECHEAP INC
- Country: IS
- IP: 216.198.79.1
- Nameservers: dns1.registrar-servers.com dns2.registrar-servers.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Costco $750
- Meta title: Costco

### Page Text
Costco ✨ Sarah M. claimed $650 $750 Costco Gift Card 1 Click The Button Below 2 Enter Your Basic Info 3 Complete 3–5 Deals 4 Claim Your Reward CLAIM YOUR GIFT CARD →

### External Links
- https://rdr.gtrx.org/aff_c?offer_id=1323&aff_id=161178

## Evidence
- Screenshot: https://i.ibb.co/p63JV46Z/887af55dea81.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d6c7e851-6ac4-478b-aea7-68a147e4c208
- PhishDestroy: https://phishdestroy.io/domain/savebig40.com/
- LLM endpoint: https://phishdestroy.io/domain/savebig40.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/savebig40.com/
Last updated: 2026-03-14