bigbroremo[.]com

This domain, bigbroremo.com, is a brand impersonation threat specifically targeting Discord users. Analysis indicates the site presents a fraudulent login interface designed to harvest credentials, likely through a cloned Discord authentication page. The page title "Home | Jupiter" suggests an attempt to disguise the malicious intent under a generic or unrelated name, while the underlying infrastructure mimics legitimate Discord services to deceive users into entering sensitive account information. Infrastructure analysis reveals multiple technical indicators confirming malicious activity. The domain was registered on September 10, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.153.174 and is currently flagged by 2 security blocklists, including PhishDestroy and ScamSniffer. VirusTotal detection shows 2 out of 95 security vendors marking the domain as malicious, while Gridinsoft assigns a trust score of 0 out of 100, further corroborating its fraudulent nature. Users who visited bigbroremo.com should immediately take corrective action. If any credentials were entered, reset passwords for Discord and any other accounts where the same credentials may have been reused. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Monitor account activity for suspicious logins or unauthorized transactions. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy malicious scripts or redirect to exploit kits. Report the domain to relevant security teams for further investigation and blocking.