dappsevmportal[.]web[.]app

The domain dappsevmportal.web.app is assessed as a high-risk threat, specifically categorized as generic_phishing. This evaluation is based on multiple indicators of compromise and the active status of the domain, suggesting ongoing malicious activities targeting unsuspecting users.

Infrastructure analysis reveals that dappsevmportal.web.app is flagged by 11 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion among cybersecurity professionals. The domain is registered through Google LLC and resolves to the IP address 199.36.158.100. Additionally, the domain appears on three security blocklists, further corroborating its malicious nature. The SSL certificate is issued by Google Trust Services, which, while typically a trusted authority, does not preclude the domain from being used for phishing attacks. The exact creation date of the domain is not provided, but the recent detection and active status suggest it is relatively new or recently repurposed for malicious activities.

To mitigate the risks associated with this domain, users are advised to avoid clicking on any links or entering personal information on the site. Network administrators should consider adding 199.36.158.100 and dappsevmportal.web.app to their firewall blocklists to prevent access. Additionally, security teams should monitor for any related IP addresses or domains registered through Google LLC that exhibit similar behavior, and deploy phishing detection tools to identify and block similar threats. Regularly updating security policies and conducting user awareness training can also help in preventing such attacks.