02-slot-ez[.]web[.]app

The domain 02-slot-ez.web.app is currently active and classified as a high‑risk generic phishing site with a specific focus on crypto fraud. VirusTotal recorded a single positive detection out of 91 scans, and the domain is listed on one external blocklist. It has been blocked by PhishDestroy, indicating that at least one industry‑wide mitigation service has taken action. Infrastructure analysis shows the domain is hosted on Google Firebase and resolves to IP address 199.36.158.100, a Google LLC address in the United States. The TLS certificate is issued by Google Trust Services (WR4) and the site enforces HSTS, supporting HTTP/3. Detected front‑end technologies include Tailwind CSS, Google Tag Manager, and Google Analytics, suggesting a typical web‑app stack rather than a specialized phishing kit. The page title "TronX สล็อตแตกง่าย - ทางเข้าเว็บตรงไม่ผ่านเอเย่นต์ API แท้ 2026" reinforces the crypto‑related lure. While the site’s exact content has not been examined, the combination of a crypto‑oriented title, a single vendor flag, and active blocking status presents a credible threat. Defenders should add the domain to deny‑list filters, monitor DNS queries for this host, and inspect outbound connections to the associated IP. Continuous re‑scanning is advised to capture any changes in vendor detections or additional blocklist listings.