bits-portfolio[.]firebaseapp[.]com

bits-portfolio.firebaseapp.com is actively engaged in a high-risk brand impersonation attack, specifically targeting the Base brand. The domain impersonates Base, potentially misleading users and collecting sensitive information. This impersonation can lead to financial loss, identity theft, or other malicious activities.

Analysis indicates that 3 out of 95 VirusTotal vendors flagged this domain as malicious. The domain is registered through Google LLC and currently resolves to the IP address 199.36.158.100, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The domain appears on 5 known security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The SSL certificate for the domain is issued by Google Trust Services / WR4, which can lend a false sense of security to unsuspecting users.

If users have visited bits-portfolio.firebaseapp.com, they should immediately check their Base accounts for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their financial statements and credit reports for any signs of fraud. Reporting the incident to Base's support team and the relevant security authorities is advised.