app-centrifuge[.]web[.]app

This domain is flagged as a high-risk phishing site targeting users of Centrifuge, an onchain asset management platform. The site mimics legitimate Centrifuge infrastructure, potentially tricking users into entering sensitive credentials, wallet connections, or financial details under the pretense of accessing asset management tools. The impersonation includes replicating Centrifuge's branding and page structure, increasing the likelihood of successful deception for users familiar with the legitimate service. Analysis indicates the domain app-centrifuge.web.app was registered through Google Firebase and resolves to the IP address 199.36.158.100, hosted by Google LLC in the United States. The SSL certificate is issued by Google Trust Services (WR4), a common feature of legitimate and malicious sites alike. Despite its professional appearance, the domain is flagged by 2 out of 95 security vendors on VirusTotal and appears on 2 security blocklists, including PhishDestroy and ScamSniffer. Notably, the domain's creation date is listed as May 18, 2026, which is anomalous and suggests potential falsification of registration records to evade detection or scrutiny. Users who have visited app-centrifuge.web.app should immediately disconnect any connected wallets or accounts and revoke any permissions granted to the site. If credentials or financial information were entered, affected parties should change passwords, enable multi-factor authentication on all related accounts, and monitor for unauthorized transactions. The domain remains active as of this report, and users are advised to verify the authenticity of any Centrifuge-related site by cross-referencing official communications or documentation. Organizations should consider blocking this domain at the network level to prevent further exposure.