polyhedra-portal[.]web[.]app

The domain polyhedra-portal.web.app is currently classified as a high‑risk generic phishing site targeting cryptocurrency users. The site returns HTTP 200 and presents the page title “Stake – Polyhedra Foundation”, indicating an attempt to reference a legitimate staking service. The page title is the only visible content extracted; the full page layout has not been analysed. Infrastructure analysis shows the domain is hosted on Google Firebase and is served over TLS with a certificate issued by Google Trust Services (WR4). The resolved address 199.36.158.100 belongs to the Fastly network (AS54113) located in the United States. The Gridinsoft trust score is 0 out of 100, reflecting a strongly negative reputation. No custom nameservers are reported. Threat intelligence indicates that two out of ninety‑five VirusTotal scanners have flagged the domain, confirming malicious activity. The domain is listed on five public blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, and appears on five security blocklists overall. Beyond these indicators, the exact malicious payload or credential‑harvesting mechanisms have not been publicly disclosed. Defenders should treat traffic to polyhedra-portal.web.app as hostile. Immediate actions include adding the domain to DNS or proxy block lists, monitoring DNS queries for the associated IP 199.36.158.100, and logging any attempted connections for forensic review. Continuous monitoring of the Fastly edge node and periodic re‑scans on VirusTotal are advised to detect any changes in the threat profile.