bigmintnft[.]online

PhishDestroy has launched an active investigation into the domain bigmintnft.online, flagged for brand impersonation targeting the NFT Mint Scam vertical. The domain utilizes a near-identical visual and lexical mimicry of legitimate NFT mint platforms to deceive users into connecting crypto wallets and initiating unauthorized transfers. Technical artifacts suggest the presence of a crypto drainer kit, intended to siphon tokens upon wallet connection. Registrant behavior and landing-page structure replicate established NFT scam playbooks, including fraudulent mint calendars and counterfeit whitelisting prompts. Current evidence points to a high-fidelity clone aimed at capitalizing on user trust in NFT launch ecosystems.

Technical indicators confirm the following attributes: VirusTotal detection score at 2/95 engines as of UTC timestamp, domain creation on October 26, 2025, resolution to IP 198.251.89.229, registration via Porkbun LLC, and an SSL certificate issued by Let’s Encrypt. Google Safe Browsing (GSB) status remains unflagged, and open-source blocklists (AbuseIPDB, PhishTank, OpenPhish) show zero current listings for the domain or IP. The domain’s age and clean detection history suggest either a newly deployed operation or one carefully evading signature-based defenses.

This domain remains ACTIVE with an UNDER INVESTIGATION risk status and moderate operational maturity. PhishDestroy has escalated telemetry to industry partners and is coordinating takedown support requests to registrar Porkbun LLC and hosting provider. Users are advised to immediately block the domain and IP at network and endpoint levels. For mitigation, enable wallet-draining protections (e.g., native transaction simulation or hardware wallet confirmation prompts), verify official mint domains via project Discord/official site, and report any suspicious wallet interactions to phishing intelligence feeds.