sweeet-cravedairy[.]web[.]app

The domain sweeet-cravedairy.web.app is flagged as an active, high‑risk generic phishing infrastructure. Registration records indicate the domain was created through Google LLC, a standard registrar for Firebase‑hosted sites, and no authoritative nameserver data is available (NS_NOT_FOUND). Network resolution points to the IP address 199.36.158.100, which is presently associated with a single security blocklist entry.

The domain has been added to the PhishDestroy blocklist, confirming that at least one dedicated anti‑phishing service has taken mitigation action. Analysis by Google Safe Browsing classifies the site under social engineering, reinforcing the phishing designation. VirusTotal assessments show that 14 of 91 scanned security vendors have raised detections, demonstrating a measurable level of malicious consensus across independent scanners.

The presence on a blocklist, combined with multiple vendor detections and Safe Browsing warnings, provides sufficient confidence for defensive operators to treat the domain as malicious. Recommended mitigation steps include adding the domain to local deny lists, configuring network firewalls to block outbound connections to 199.36.158.100, and monitoring for any related sub‑domains or future DNS changes. Continuous re‑evaluation is advised, as threat actors may shift hosting or alter DNS records, but current evidence substantiates a confirmed phishing threat emanating from this Firebase‑hosted domain.