Our Firebase project was suspended after Trust & Safety flagged our Firebase Hosting dev site http://reach5g-website-dev.web.app/ for suspected phishing on 16 Jul 2026.
This is a false positive. The site is our own legitimate internal operations portal:
- Β It is not intended for the public. It is used only by our staff.
- It is publicly reachable (it is on a *.web.app URL), but every login goes through our company SSO. There is no credential form that collects usernames or passwords itself.
- We have had similar phishing flags on our own legitimate sites before, so we suspect automated detection is picking up the login page.
Β
We submitted an appeal on 26 Oct 2026 (Google appeal ID: KVHH4HJDMNAA6DNYXXSY67B3WU) and were told to expect a response within two business days. It has now been more than 15 days with no decision.
