big-one[.]site

PhishDestroy identifies big-one.site as an active credential harvesting domain designed to deceive users into submitting sensitive login credentials. The domain is currently unblocked and operational, posing an imminent risk to unwary visitors. No specific brand impersonation has been confirmed at this stage, but the domain’s structure and SSL certificate suggest a sophisticated attempt to mimic legitimate services. Security researchers are advised to monitor this domain closely as threat intelligence evolves.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating that it remains undetected by most antivirus engines as of the latest scan. The domain was registered through Spaceship, Inc. on February 11, 2026, and resolves to IP address 188.114.97.3. The domain utilizes a Google Trust Services SSL certificate, which may lend an air of legitimacy to potential victims. Additional blocklist data and trust scores are pending further investigation, but the domain’s recent creation and lack of detections warrant heightened scrutiny.

The current status of big-one.site is active and under investigation, with no confirmed blocklist entries at this time. Given the absence of detections and the domain’s recent registration, users are strongly advised to avoid interacting with this site and to report any suspicious activity to their security teams. Organizations should consider implementing network-level blocking for the associated IP address (188.114.97.3) to mitigate potential exposure. Security researchers are encouraged to contribute additional threat intelligence to ensure comprehensive coverage of this emerging threat.