bightterr[.]xyz

bightterr.xyz is a phishing domain that targets users by impersonating the 'base' brand. Despite being offline now, it previously posed a threat by attempting to deceive users into connecting their cryptocurrency wallets. The domain was flagged by 6 out of 95 vendors on VirusTotal, indicating its malicious nature. It was also listed on four public blocklists, including PhishDestroy and MetaMask.

The domain's page contained references to multiple brands, including coinbase, discord, ethereum, and telegram, to increase its credibility. This multi-brand approach is a common tactic in phishing schemes to lure users into a false sense of security. The site was hosted on an IP belonging to Cloudflare, Inc., a common choice for malicious actors due to its robust infrastructure.

bightterr.xyz was registered with NiceNIC International Group Co., Limited, a registrar often used by scammers due to its lenient policies. The domain was created on February 21, 2026, but PhishDestroy detected it almost a month earlier, on January 24, 2026. This discrepancy highlights the proactive nature of PhishDestroy's detection pipeline, which identifies threats before they are widely recognized by antivirus vendors. The absence of an SSL certificate further indicates the site's malicious intent, as legitimate sites typically secure their connections.