astar-apps[.]firebaseapp[.]com

The domain astar-apps.firebaseapp.com is currently active and engaged in a high-risk brand impersonation campaign targeting the Discord platform. This phishing domain masquerades as a legitimate asset portal for the Astar Network, tricking users into believing they are interacting with an official Discord-related service. The threat is classified as brand impersonation, where the attacker leverages the trusted name of Discord to deceive victims into disclosing sensitive information or connecting cryptocurrency wallets.

Technical analysis of astar-apps.firebaseapp.com reveals alarming indicators. The domain has been flagged by 13 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. It appears on one security blocklist and was registered through Google LLC, with an SSL certificate issued by Google Trust Services (WR4). The domain resolves to the IPv6 address 2620:0:890::100. The page title, "Assets | Astar Portal - Astar Network," is designed to appear legitimate, further enhancing its deceptive appeal. These technical details underscore the sophisticated nature of the phishing operation.

Given its current active status and high risk level, immediate caution is advised. Users who encounter astar-apps.firebaseapp.com should avoid any interaction, especially entering credentials or connecting wallets. PhishDestroy recommends verifying all Discord-related links through official channels and reporting suspicious domains to security teams. Regular monitoring of blocklists and employing real-time phishing detection tools can help mitigate exposure to this and similar threats.