vgf667dd[.]web[.]app

The domain vgf667dd.web.app is currently categorized as a high-risk brand impersonation threat targeting the brand Base. Analysis indicates that this domain is actively hosting content mimicking legitimate services, as evidenced by the page title 'Welcome to Firebase Hosting' and its registration through Google LLC. The domain was created on April 15, 2026, and it continues to remain active as of the report date, July 12, 2026.

Security analysis from VirusTotal shows that 5 out of 95 security vendors have flagged this domain, which indicates a potential risk, though the exact nature of the threats identified is not detailed. Furthermore, the domain is listed on three security blocklists, including PhishDestroy, OISD, and BLP-Malware, which reinforces its classification as a phishing threat. The current infrastructure employs Firebase technologies, which are often leveraged for hosting purposes, raising concerns about the domain's intent and usage.

The SSL certificate is issued by Google Trust Services, which can lend a false sense of security to unsuspecting users. However, the low trust scores from platforms such as Gridinsoft (0/100) and Scamadviser (1/100) highlight the domain's fraudulent characteristics. The domain resolves to IP address 199.36.158.100, which may be associated with other malicious activities or domains.

Defenders should prioritize monitoring for any communications or user interactions that may involve this domain. Immediate actions may include blocking the domain at the network level and educating users about the risks associated with interacting with it. Continuous tracking of this domain's activity and its associations with other malicious entities is advisable to prevent further exploitation.