aborking999[.]web[.]app

This domain, aborking999.web.app, operates as a credential harvesting platform targeting users of the mobile game Board Kings. The page displays fraudulent offers for in-game currency, including "Bonus Diamond and Rolls Coins," with a prominent call-to-action to "Click Here!!" designed to trick victims into submitting login credentials or financial information under the guise of claiming rewards. Analysis indicates the infrastructure is specifically engineered to exploit users expecting legitimate promotions from the game publisher, Jelly Button Games. Infrastructure analysis reveals the domain was registered through Google Firebase on June 07, 2026, and resolves to the IP address 199.36.158.100. The SSL certificate is issued by Google Trust Services (WR4), a common characteristic of Firebase-hosted applications. Security vendor detection on VirusTotal stands at 1/95, while the domain appears on one security blocklist. The page title, "🎁 Board Kings Bonus Diamond and Rolls Coins | Click Here!!," directly mimics promotional language used in legitimate gaming offers, increasing the likelihood of successful deception. Users who visited this domain should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. If financial information was submitted, affected parties should contact their payment provider to dispute potential fraudulent transactions. The domain remains active as of this report, and users are advised to avoid interacting with any content hosted on aborking999.web.app or similar Firebase-based subdomains promoting Board Kings rewards. Security teams should update blocklists to include this domain and its resolving IP address to prevent further exposure.