Skip to main content
Question

Firebase Hosting site suspended for phishing (false positive) - appeal has had no response for 15+ days

  • Nov 10, 2026 8:09 AM UTC
  • 0 replies
  • 3 views

lakshman_reach

Our Firebase project was suspended after Trust & Safety flagged our Firebase Hosting dev site http://reach5g-website-dev.web.app/ for suspected phishing on 16 Jul 2026.

This is a false positive. The site is our own legitimate internal operations portal:

  • Β It is not intended for the public. It is used only by our staff.
  • It is publicly reachable (it is on a *.web.app URL), but every login goes through our company SSO. There is no credential form that collects usernames or passwords itself.
  • We have had similar phishing flags on our own legitimate sites before, so we suspect automated detection is picking up the login page.

Β 

We submitted an appeal on 26 Oct 2026 (Google appeal ID: KVHH4HJDMNAA6DNYXXSY67B3WU) and were told to expect a response within two business days. It has now been more than 15 days with no decision.