bits-portfolio[.]web[.]app

This domain, bits-portfolio.web.app, is currently flagged as a high-risk generic phishing resource targeting users through deceptive cloud storage or portfolio-themed lures. Analysis indicates the domain remains active, with no prior brand impersonation confirmed at this stage. The threat type is classified as generic phishing, leveraging social engineering tactics to harvest credentials or distribute malicious payloads under the guise of legitimate file-sharing or portfolio services. Infrastructure analysis reveals the domain is registered through Google LLC and resolves to the IP address 199.36.158.100, hosted on AS54113 (Fastly, Inc.) in the United States. Despite its active malicious status, the domain has not been flagged by any of the 95 vendors on VirusTotal as of the latest scan. However, it appears on five distinct security blocklists, including entries from PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The SSL certificate is issued by Google Trust Services (WR4), providing a veneer of legitimacy. The page title, 'Quota Exceeded,' suggests an attempt to mimic cloud storage service errors to prompt user interaction, such as entering credentials or downloading files. Current assessment confirms the domain remains operational and poses a significant risk to users encountering it through phishing campaigns. Organizations are advised to implement immediate network-level blocking for the domain and its associated IP (199.36.158.100). Endpoint protection systems should be updated to include this domain in phishing and malicious URL detection rules. Users who may have interacted with the domain should be instructed to reset credentials for any accounts accessed during the session, particularly if multi-factor authentication was not enabled. Monitoring for secondary infections or lateral movement is recommended, given the domain's active status and lack of prior detection on major scanning platforms.