edu-project-b1baa[.]firebaseapp[.]com

The domain edu-project-b1baa.firebaseapp.com was registered on 21 February 2026 through Google LLC’s Firebase service and resolves to the Fastly edge IP 199.36.158.100 (AS54113, United States). The site serves content over HTTPS using a Google Trust Services certificate issued to “WR4”, and returns HTTP 200 responses. Automated analysis identified a page title of “Musksapcex 2026”, and the front‑end stack includes Firebase hosting, Bootstrap, jsDelivr, jQuery CDN, jQuery, HSTS and HTTP/3. The campaign is classified as a crypto‑scam that impersonates the brand “compound”.

VirusTotal records show that one of ninety‑one scanning engines flagged the domain, and three independent blocklists already list it. Local security products such as PhishDestroy, MetaMask and SEAL have blocked the site. The Gridinsoft trust score is 0 / 100, indicating a lack of reputation. Current intelligence confirms the domain is still active.

No additional payload or credential‑harvesting behaviour has been publicly disclosed, and the exact malicious flow beyond the title has not been captured. Defenders should treat the host as hostile: block the domain at DNS or proxy level, add the IP address 199.36.158.100 to network‑level deny lists, and monitor for any traffic that matches the identified technology fingerprint. Continuous re‑scanning with multi‑engine services is recommended to detect any emerging indicators, and any sightings should be reported to relevant brand‑protection teams.