workshop-6d91d[.]web[.]app

PhishDestroy identifies an active fake-login campaign hosted at workshop-6d91d.web.app that impersonates the official Banco do Brasil website. The page prompts users to enter banking and cryptocurrency wallet credentials; once submitted, the harvested data is immediately fed into an automated draining workflow designed to transfer digital assets to attacker-controlled wallets. Sites like this are a prime vector for rapid financial loss and identity theft. This domain was flagged by 15 of 95 VirusTotal security vendors, placed on a single blocklist maintained by OISD, and resolves to IP 199.36.158.100. It is registered through Google LLC under the .web.app top-level domain and continues to serve the fake login template. Its SSL certificate is issued by Google Trust Services, giving it a false veneer of legitimacy that deceives non-technical users. If you visited workshop-6d91d.web.app and entered any credentials or wallet addresses, immediately revoke any compromised API keys or wallet connections and rotate passwords on all associated accounts. Use PhishDestroy’s real-time verifier to confirm safe sites, scan devices for infostealers, and report the domain to your bank and local cybercrime unit. Early action significantly reduces the risk of further losses.